##############################################################################
# URLhaus ASN CSV Feed                                                       #
# Generated on 2025-11-19 08:15:09 UTC                                       #
#                                                                            #
# For questions please refer to:                                             #
# https://urlhaus.abuse.ch/feeds/                                            #
##############################################################################
#
# Feed generated for AS205275
#
# Dateadded (UTC),URL,URL_status,Threat,Tags,Host,IPaddress,ASnumber,Country
"2025-10-29 19:36:09","https://arhitectpitesti.ro/wp-includes/theme-compat/toters.vbs","online","malware_download","AsyncRAT|RAT|vbs|WSHRAT","arhitectpitesti.ro","89.41.38.48","205275","RO"
"2025-10-08 07:01:07","https://inchiriaza-imprimante.ro/images/wealthybillionaires.txt","offline","malware_download","ascii|encoded|rev-base64-loader|XWorm","inchiriaza-imprimante.ro","89.42.218.37","205275","RO"
"2025-10-06 11:21:10","https://aerconditionat-arges.ro/tmb/wealthyblessedman.txt","online","malware_download","rev-base64-loader|XWorm","aerconditionat-arges.ro","89.42.218.37","205275","RO"
"2025-09-25 09:09:08","https://arhitectpitesti.ro/wp-includes/images/crystal/wp.vbs","offline","malware_download","RAT|Vjw0rm|WSHRAT","arhitectpitesti.ro","89.41.38.48","205275","RO"
"2024-10-23 06:18:08","http://spitalcfpascani.ro/update/WEALTHY.txt","offline","malware_download","Base64|RemcosRAT|rev-base64-loader","spitalcfpascani.ro","89.42.218.111","205275","RO"
"2024-09-17 16:31:10","https://epsys.ro/we/B.exe","offline","malware_download","AgentTesla","epsys.ro","89.42.218.72","205275","RO"
"2024-09-17 16:31:09","https://epsys.ro/we/ord.exe","offline","malware_download","Formbook","epsys.ro","89.42.218.72","205275","RO"
"2024-09-17 16:31:08","https://epsys.ro/we/kin.exe","offline","malware_download","AgentTesla","epsys.ro","89.42.218.72","205275","RO"
"2024-09-17 14:41:06","https://epsys.ro/we/DEMONCODER.dll","offline","malware_download","dll","epsys.ro","89.42.218.72","205275","RO"
"2024-09-17 14:41:05","https://epsys.ro/we/euro.exe","offline","malware_download","exe|Formbook","epsys.ro","89.42.218.72","205275","RO"
"2024-09-11 13:40:07","https://epsys.ro/we/bin.exe","offline","malware_download","Formbook|Xloader","epsys.ro","89.42.218.72","205275","RO"
"2024-09-06 07:00:10","https://marioresidence.ro/configs/tyvFSOAxkuVIwsqPjOk34.bin","offline","malware_download","encrypted|GuLoader|RAT|RemcosRAT","marioresidence.ro","89.41.38.48","205275","RO"
"2024-09-06 06:59:07","https://marioresidence.ro/configs/Sterilization.prm","offline","malware_download","ascii|GuLoader|RAT|RemcosRAT","marioresidence.ro","89.41.38.48","205275","RO"
"2024-08-29 01:16:09","http://tricotexbacau.ro/wp-admin/users/Fredeliggrende.qxd","offline","malware_download","ascii|encoded|GuLoader","tricotexbacau.ro","89.42.218.8","205275","RO"
"2024-08-29 01:16:08","http://tricotexbacau.ro/wp-admin/img/Yoldring.java","offline","malware_download","ascii|encoded|GuLoader","tricotexbacau.ro","89.42.218.8","205275","RO"
"2024-08-29 01:16:08","http://tricotexbacau.ro/wp-includes/img/Nondiscontinuance.mix","offline","malware_download","ascii|encoded|GuLoader","tricotexbacau.ro","89.42.218.8","205275","RO"
"2024-08-29 01:16:08","https://tricotexbacau.ro/wp-admin/img/Yoldring.java","offline","malware_download","ascii|encoded|GuLoader","tricotexbacau.ro","89.42.218.8","205275","RO"
"2024-08-29 01:16:08","https://tricotexbacau.ro/wp-includes/img/Nondiscontinuance.mix","offline","malware_download","ascii|encoded|GuLoader","tricotexbacau.ro","89.42.218.8","205275","RO"
"2024-08-29 01:16:07","https://tricotexbacau.ro/wp-admin/users/Fredeliggrende.qxd","offline","malware_download","ascii|encoded|GuLoader","tricotexbacau.ro","89.42.218.8","205275","RO"
"2024-08-21 16:00:10","https://voineasa.ro/contents/NWnWu72.bin","offline","malware_download","encrypted|GuLoader|RAT|RemcosRAT","voineasa.ro","89.41.38.48","205275","RO"
"2024-08-21 13:00:08","https://voineasa.ro/contents/Tilbjeligere.dwp","offline","malware_download","ascii|encoded|GuLoader","voineasa.ro","89.41.38.48","205275","RO"
"2024-08-21 07:27:05","https://voineasa.ro/contents/hdnQSeddqloQmmjxBimXjTwJ75.bin","offline","malware_download","RAT|RemcosRAT","voineasa.ro","89.41.38.48","205275","RO"
"2024-07-09 08:47:24","http://moviesmacktalk.com/GtOVUxlNa102.bin","offline","malware_download","encrypted|GuLoader|RemcosRAT","moviesmacktalk.com","89.42.218.27","205275","RO"
"2024-07-09 08:46:43","https://moviesmacktalk.com/Kamelens.xtp","offline","malware_download","ascii|encoded|GuLoader","moviesmacktalk.com","89.42.218.27","205275","RO"
"2024-07-09 08:46:23","http://moviesmacktalk.com/Prototroch.emz","offline","malware_download","ascii|encoded|GuLoader","moviesmacktalk.com","89.42.218.27","205275","RO"
"2024-07-09 08:46:22","http://moviesmacktalk.com/Kamelens.xtp","offline","malware_download","ascii|encoded|GuLoader","moviesmacktalk.com","89.42.218.27","205275","RO"
"2024-07-09 08:46:22","https://moviesmacktalk.com/Prototroch.emz","offline","malware_download","ascii|encoded|GuLoader","moviesmacktalk.com","89.42.218.27","205275","RO"
"2024-07-09 08:46:21","https://moviesmacktalk.com/GtOVUxlNa102.bin","offline","malware_download","encrypted|GuLoader|RemcosRAT","moviesmacktalk.com","89.42.218.27","205275","RO"
"2024-06-29 09:18:15","https://moviesmacktalk.com/news/zzz/hszaeDUSFhkkgmhSY254.bin","offline","malware_download","GuLoader|RAT|RemcosRAT","moviesmacktalk.com","89.42.218.27","205275","RO"
"2024-06-29 09:18:08","https://moviesmacktalk.com/news/zzz/Reglernes.pcx","offline","malware_download","GuLoader|RAT|RemcosRAT","moviesmacktalk.com","89.42.218.27","205275","RO"
"2024-06-29 09:18:08","https://moviesmacktalk.com/news/zzz/vIJEsoPxqWxclBf51.bin","offline","malware_download","GuLoader|RAT|RemcosRAT","moviesmacktalk.com","89.42.218.27","205275","RO"
"2024-01-25 19:02:48","https://andamiechipamente.ro/5iv/","offline","malware_download","TA577|TR","andamiechipamente.ro","89.42.218.91","205275","RO"
"2023-12-22 16:09:18","https://gptplan.ro/wcrsfz/","offline","malware_download","PDF|Pikabot|TA577|TR|ZIP","gptplan.ro","89.42.218.242","205275","RO"
"2023-12-21 16:06:32","https://progusto.ro/fio/","offline","malware_download","Pikabot|TA577|TR|zip","progusto.ro","93.115.53.199","205275","RO"
"2023-12-21 16:06:12","https://denisspedition.ro/ogzn/","offline","malware_download","Pikabot|TA577|TR|zip","denisspedition.ro","89.42.218.162","205275","RO"
"2023-12-21 16:04:33","https://ultrastei.ro/vcd/","offline","malware_download","Pikabot|TA577|TR|zip","ultrastei.ro","89.42.218.237","205275","RO"
"2023-12-21 16:04:26","https://spitalcfpascani.ro/w4h5q/","offline","malware_download","Pikabot|TA577|TR|zip","spitalcfpascani.ro","89.42.218.111","205275","RO"
"2023-12-20 14:57:31","https://highcare-bucuresti.com/hpppw/","offline","malware_download","Pikabot|TA577|TR|zip","highcare-bucuresti.com","188.240.20.155","205275","RO"
"2023-12-19 15:06:52","https://denisspedition.ro/p8wq/","offline","malware_download","TR","denisspedition.ro","89.42.218.162","205275","RO"
"2023-12-19 15:06:43","https://clinicileardeleanu.ro/fb2kwo/","offline","malware_download","TR","clinicileardeleanu.ro","89.42.218.142","205275","RO"
"2023-12-19 15:06:36","https://casemobilejapeto.ro/4woth5/","offline","malware_download","TR","casemobilejapeto.ro","89.42.218.209","205275","RO"
"2023-12-19 15:06:29","https://pifmedia.ro/nxrzzi/","offline","malware_download","TR","pifmedia.ro","89.42.218.239","205275","RO"
"2023-12-19 15:06:01","https://dj-david.ro/uxa/","offline","malware_download","TR","dj-david.ro","89.42.218.226","205275","RO"
"2023-12-19 15:06:00","https://fundatiispeciale.ro/v9xqrq/","offline","malware_download","TR","fundatiispeciale.ro","89.42.218.29","205275","RO"
"2023-12-19 15:05:40","https://rclrt.ro/hfh/","offline","malware_download","TR","rclrt.ro","89.41.38.22","205275","RO"
"2023-12-19 15:05:25","https://diamond-dent.net/6eg/","offline","malware_download","TR","diamond-dent.net","89.42.218.206","205275","RO"
"2023-12-18 17:33:47","https://cabinetstomatologic-brasov.ro/ru2a/","offline","malware_download","TR","cabinetstomatologic-brasov.ro","89.42.218.29","205275","RO"
"2023-12-18 17:33:23","https://expressslichidator.ro/ah0/","offline","malware_download","TR","expressslichidator.ro","89.42.218.101","205275","RO"
"2023-12-15 08:43:40","https://cascade-wow.eu/tura27/","offline","malware_download","js|Pikabot|TA577|TR|zip","cascade-wow.eu","89.42.218.231","205275","RO"
"2023-12-15 08:43:25","https://georgica.ro/gfq/","offline","malware_download","js|Pikabot|TA577|TR|zip","georgica.ro","89.42.218.231","205275","RO"
"2023-11-17 19:14:18","https://girlsmacktalk.com/enelverfactura/?hash=user@domain.com","offline","malware_download","Mekotio","girlsmacktalk.com","89.42.218.27","205275","RO"
"2023-06-16 15:24:54","https://haleportostudio.ro/irm/?1","offline","malware_download","BB32|geofenced|js|Qakbot|Qbot|Quakbot|TR|USA","haleportostudio.ro","89.40.72.27","205275","RO"
"2023-06-16 15:22:36","https://bestachizitii.ro/eld/?1","offline","malware_download","BB32|geofenced|js|Qakbot|Qbot|Quakbot|TR|USA","bestachizitii.ro","93.115.53.199","205275","RO"
"2023-06-15 16:15:53","https://gederex.ro/st/?1","offline","malware_download","BB32|geofenced|js|Qakbot|USA","gederex.ro","89.42.218.29","205275","RO"
"2023-06-15 16:14:12","https://bestachizitii.ro/tete/?1","offline","malware_download","BB32|geofenced|js|Qakbot|USA","bestachizitii.ro","93.115.53.199","205275","RO"
"2023-06-15 11:03:17","https://gederex.ro/st/?","offline","malware_download","BB32|geofenced|js|Qakbot|USA","gederex.ro","89.42.218.29","205275","RO"
"2023-06-14 16:56:52","https://astonclinic.ie/nsau/?1","offline","malware_download","BB32|geofenced|js|Qakbot|Quakbot|USA","astonclinic.ie","89.42.218.36","205275","RO"
"2023-05-16 21:52:15","https://bestachizitii.com/ca/?1","offline","malware_download","BB28|geofenced|GuLoader|js|Qakbot|Qbot|Quakbot|USA","bestachizitii.com","93.115.53.199","205275","RO"
"2023-05-16 19:08:19","https://bestachizitii.com/tma/?1","offline","malware_download","BB28|geofenced|js|Qakbot|Qbot|Quakbot|USA","bestachizitii.com","93.115.53.199","205275","RO"
"2023-05-05 08:43:37","https://meqyas.ae/download/File_pass1234.zip","offline","malware_download","1234|password-protected|zip","meqyas.ae","89.42.218.10","205275","RO"
"2023-03-16 16:20:19","https://art-dentalstudio.ro/ima/ima.js","offline","malware_download","BB19|geofenced|js|Pikabot|Qakbot|Qbot|Quakbot|USA","art-dentalstudio.ro","89.42.218.228","205275","RO"
"2022-12-14 16:03:35","https://felixfinance.ro/ups/index.php","offline","malware_download","BB10|ISO|nt005|qakbot|qbot|quakbot|TR|zip","felixfinance.ro","89.40.72.91","205275","RO"
"2022-12-13 20:31:41","https://marketingitalianfood.ro/lsi/index.php?qbot.zip","offline","malware_download","675|BB10|ISO|nt005|qakbot|qbot|quakbot|TR|zip","marketingitalianfood.ro","89.40.72.91","205275","RO"
"2022-12-13 20:16:01","https://asociatialucanineibalcani.ro/as/index.php?qbot.zip","offline","malware_download","675|BB10|ISO|nt005|qakbot|qbot|quakbot|TR|zip","asociatialucanineibalcani.ro","89.40.72.91","205275","RO"
"2022-11-14 17:06:20","https://provita-nutrition.ro/er/index.php?qbot.zip","offline","malware_download","BB06|HK57|iso|qakbot|qbot|quakbot|TR|zip","provita-nutrition.ro","89.39.83.31","205275","RO"
"2022-11-14 17:06:17","https://organikfarm.eu/ma/index.php?qbot.zip","offline","malware_download","BB06|HK57|iso|qakbot|qbot|quakbot|TR|zip","organikfarm.eu","89.39.83.31","205275","RO"
"2022-11-14 17:06:17","https://provita-organika.ro/eaq/index.php?qbot.zip","offline","malware_download","BB06|HK57|iso|qakbot|qbot|quakbot|TR|zip","provita-organika.ro","89.39.83.31","205275","RO"
"2022-11-14 17:06:13","https://organikfarm.ro/do/index.php?qbot.zip","offline","malware_download","BB06|HK57|iso|qakbot|qbot|quakbot|TR|zip","organikfarm.ro","89.39.83.31","205275","RO"
"2022-11-14 17:02:12","https://anglonubian.ro/onon/index.php?qbot.zip","offline","malware_download","BB06|HK57|iso|qakbot|qbot|quakbot|TR|zip","anglonubian.ro","89.39.83.31","205275","RO"
"2022-11-02 01:57:24","https://norocelsrl.ro/ereu/qbot.zip","offline","malware_download","BB05|BV1|iso|qakbot|qbot|quakbot|TR|zip","norocelsrl.ro","89.42.218.246","205275","RO"
"2022-11-02 01:56:46","https://profetul-muhammed.ro/qnae/qbot.zip","offline","malware_download","BB05|BV1|iso|qakbot|qbot|quakbot|TR|zip","profetul-muhammed.ro","89.42.218.101","205275","RO"
"2022-11-02 01:56:34","https://stagira.ro/re/qbot.zip","offline","malware_download","BB05|BV1|iso|qakbot|qbot|quakbot|TR|zip","stagira.ro","89.42.218.246","205275","RO"
"2022-11-02 01:56:16","https://startbusinessclub.ro/eail/qbot.zip","offline","malware_download","BB05|BV1|iso|qakbot|qbot|quakbot|TR|zip","startbusinessclub.ro","188.241.142.222","205275","RO"
"2022-11-02 01:51:18","https://averroes.ro/isci/qbot.zip","offline","malware_download","BB05|BV1|iso|qakbot|qbot|quakbot|TR|zip","averroes.ro","89.42.218.101","205275","RO"
"2022-10-31 17:00:16","https://femeiamusulmana.ro/iics/qakbot.zip","offline","malware_download","BB05|BV1|iso|qakbot|qbot|quakbot|TR|zip","femeiamusulmana.ro","89.42.218.101","205275","RO"
"2022-10-31 16:16:20","https://vin-acasa.ro/ui/qakbot.zip","offline","malware_download","BB05|BV1|iso|qakbot|qbot|quakbot|TR|zip","vin-acasa.ro","89.41.38.22","205275","RO"
"2022-10-31 16:16:07","https://vilanova.ro/oi/qakbot.zip","offline","malware_download","BB05|BV1|iso|qakbot|qbot|quakbot|TR|zip","vilanova.ro","89.42.218.234","205275","RO"
"2022-10-31 16:15:48","https://terapie-copii.ro/qe/qakbot.zip","offline","malware_download","BB05|BV1|iso|qakbot|qbot|quakbot|TR|zip","terapie-copii.ro","89.42.218.237","205275","RO"
"2022-10-31 16:13:28","https://rabota.ro/sma/qakbot.zip","offline","malware_download","BB05|BV1|iso|qakbot|qbot|quakbot|TR|zip","rabota.ro","89.42.218.165","205275","RO"
"2022-10-31 16:12:32","https://maverick-adventure.ro/edd/qakbot.zip","offline","malware_download","BB05|BV1|iso|qakbot|qbot|quakbot|TR|zip","maverick-adventure.ro","89.42.218.237","205275","RO"
"2022-10-31 16:11:55","https://ioanadominte.ro/eidi/qakbot.zip","offline","malware_download","BB05|BV1|iso|qakbot|qbot|quakbot|TR|zip","ioanadominte.ro","89.42.218.147","205275","RO"
"2022-10-31 16:11:55","https://luxuryhomefurniture.ro/dnq/qakbot.zip","offline","malware_download","BB05|BV1|iso|qakbot|qbot|quakbot|TR|zip","luxuryhomefurniture.ro","89.42.218.240","205275","RO"
"2022-10-31 16:07:25","https://bucovinacazare.ro/osui/qakbot.zip","offline","malware_download","BB05|BV1|iso|qakbot|qbot|quakbot|TR|zip","bucovinacazare.ro","89.42.218.243","205275","RO"
"2022-10-27 23:37:40","https://jurnalgiurgiuvean.ro/me/qakbot.zip","offline","malware_download","BB04|iso|PG1|qakbot|qbot|quakbot|TR|zip","jurnalgiurgiuvean.ro","89.39.83.231","205275","RO"
"2022-10-27 23:37:38","https://jurnalgiurgiuvean.ro/ipoo/qakbot.zip","offline","malware_download","BB04|iso|PG1|qakbot|qbot|quakbot|TR|zip","jurnalgiurgiuvean.ro","89.39.83.231","205275","RO"
"2022-10-27 23:37:14","https://jurnalgiurgiuvean.ro/el/qakbot.zip","offline","malware_download","BB04|iso|PG1|qakbot|qbot|quakbot|TR|zip","jurnalgiurgiuvean.ro","89.39.83.231","205275","RO"
"2022-10-27 23:33:26","https://bartha-prelatecamioane.ro/qsuu/qakbot.zip","offline","malware_download","BB04|iso|PG1|qakbot|qbot|quakbot|TR|zip","bartha-prelatecamioane.ro","93.115.53.7","205275","RO"
"2022-10-27 23:33:14","https://bartha-prelatecamioane.ro/aiqb/qakbot.zip","offline","malware_download","BB04|iso|PG1|qakbot|qbot|quakbot|TR|zip","bartha-prelatecamioane.ro","93.115.53.7","205275","RO"
"2022-10-27 23:33:08","https://bartha-prelatecamioane.ro/aute/qakbot.zip","offline","malware_download","BB04|iso|PG1|qakbot|qbot|quakbot|TR|zip","bartha-prelatecamioane.ro","93.115.53.7","205275","RO"
"2022-10-27 23:33:08","https://bartha-prelatecamioane.ro/ru/qakbot.zip","offline","malware_download","BB04|iso|PG1|qakbot|qbot|quakbot|TR|zip","bartha-prelatecamioane.ro","93.115.53.7","205275","RO"
"2022-10-27 23:33:07","https://bartha-prelatecamioane.ro/erta/qakbot.zip","offline","malware_download","BB04|iso|PG1|qakbot|qbot|quakbot|TR|zip","bartha-prelatecamioane.ro","93.115.53.7","205275","RO"
"2022-09-30 21:02:40","https://glcrypto.ro/nim/eedts","offline","malware_download","BB|qakbot|qbot|quakbot|TR|U492|zip","glcrypto.ro","185.162.65.207","205275","RO"
"2022-09-30 21:02:37","https://glcrypto.ro/nim/dsltnrpeuueael","offline","malware_download","BB|qakbot|qbot|quakbot|TR|U492|zip","glcrypto.ro","185.162.65.207","205275","RO"
"2022-09-30 21:02:37","https://glcrypto.ro/nim/nqstaiiu","offline","malware_download","BB|qakbot|qbot|quakbot|TR|U492|zip","glcrypto.ro","185.162.65.207","205275","RO"
"2022-09-30 21:02:37","https://glcrypto.ro/nim/onnrntaieimvie","offline","malware_download","BB|qakbot|qbot|quakbot|TR|U492|zip","glcrypto.ro","185.162.65.207","205275","RO"
"2022-09-30 21:02:37","https://glcrypto.ro/nim/reucmrafree","offline","malware_download","BB|qakbot|qbot|quakbot|TR|U492|zip","glcrypto.ro","185.162.65.207","205275","RO"
"2022-09-30 21:02:37","https://glcrypto.ro/nim/rrplhionio","offline","malware_download","BB|qakbot|qbot|quakbot|TR|U492|zip","glcrypto.ro","185.162.65.207","205275","RO"
"2022-09-30 21:02:36","https://glcrypto.ro/nim/aiusltaa","offline","malware_download","BB|qakbot|qbot|quakbot|TR|U492|zip","glcrypto.ro","185.162.65.207","205275","RO"
"2022-09-30 21:02:36","https://glcrypto.ro/nim/naaqmiigu","offline","malware_download","BB|qakbot|qbot|quakbot|TR|U492|zip","glcrypto.ro","185.162.65.207","205275","RO"
"2022-09-30 21:02:36","https://glcrypto.ro/nim/pttlmuospavbietesnuuari","offline","malware_download","BB|qakbot|qbot|quakbot|TR|U492|zip","glcrypto.ro","185.162.65.207","205275","RO"
"2022-09-30 21:02:28","https://glcrypto.ro/nim/alltiiomatu","offline","malware_download","BB|qakbot|qbot|quakbot|TR|U492|zip","glcrypto.ro","185.162.65.207","205275","RO"
"2022-09-30 21:02:26","https://glcrypto.ro/nim/ucmrmrue","offline","malware_download","BB|qakbot|qbot|quakbot|TR|U492|zip","glcrypto.ro","185.162.65.207","205275","RO"
"2022-09-30 21:02:25","https://glcrypto.ro/nim/avintleimi","offline","malware_download","BB|qakbot|qbot|quakbot|TR|U492|zip","glcrypto.ro","185.162.65.207","205275","RO"
"2022-09-30 21:02:25","https://glcrypto.ro/nim/tuesd","offline","malware_download","BB|qakbot|qbot|quakbot|TR|U492|zip","glcrypto.ro","185.162.65.207","205275","RO"
"2022-09-30 21:02:25","https://glcrypto.ro/nim/xoetdi","offline","malware_download","BB|qakbot|qbot|quakbot|TR|U492|zip","glcrypto.ro","185.162.65.207","205275","RO"
"2022-09-30 21:02:19","https://glcrypto.ro/nim/lquosordmae","offline","malware_download","BB|qakbot|qbot|quakbot|TR|U492|zip","glcrypto.ro","185.162.65.207","205275","RO"
"2022-09-30 21:02:16","https://glcrypto.ro/nim/seecsionlrdutno","offline","malware_download","BB|qakbot|qbot|quakbot|TR|U492|zip","glcrypto.ro","185.162.65.207","205275","RO"
"2022-09-30 21:02:15","https://glcrypto.ro/nim/abmetuniosovtlp","offline","malware_download","BB|qakbot|qbot|quakbot|TR|U492|zip","glcrypto.ro","185.162.65.207","205275","RO"
"2022-09-30 21:02:15","https://glcrypto.ro/nim/oebvleminnoarrut","offline","malware_download","BB|qakbot|qbot|quakbot|TR|U492|zip","glcrypto.ro","185.162.65.207","205275","RO"
"2022-09-30 21:02:15","https://glcrypto.ro/nim/raoetvu","offline","malware_download","BB|qakbot|qbot|quakbot|TR|U492|zip","glcrypto.ro","185.162.65.207","205275","RO"
"2022-09-28 17:42:20","https://asr24.ro/aii/auvautpltumot","offline","malware_download","BB|H322|H436|qakbot|qbot|quakbot|TR|U425|zip","asr24.ro","89.41.38.48","205275","RO"
"2022-09-28 17:42:20","https://asr24.ro/aii/dspsomireioamcroe","offline","malware_download","BB|H322|H436|qakbot|qbot|quakbot|TR|U425|zip","asr24.ro","89.41.38.48","205275","RO"
"2022-09-28 17:42:17","https://asr24.ro/aii/sieuits","offline","malware_download","BB|H322|H436|qakbot|qbot|quakbot|TR|U425|zip","asr24.ro","89.41.38.48","205275","RO"
"2022-09-28 17:42:17","https://asr24.ro/aii/sitsbisadbiicnuetetes","offline","malware_download","BB|H322|H436|qakbot|qbot|quakbot|TR|U425|zip","asr24.ro","89.41.38.48","205275","RO"
"2022-09-28 17:42:17","https://asr24.ro/aii/stgnimoufi","offline","malware_download","BB|H322|H436|qakbot|qbot|quakbot|TR|U425|zip","asr24.ro","89.41.38.48","205275","RO"
"2022-09-28 17:42:17","https://asr24.ro/aii/vroseet","offline","malware_download","BB|H322|H436|qakbot|qbot|quakbot|TR|U425|zip","asr24.ro","89.41.38.48","205275","RO"
"2022-09-28 17:42:16","https://asr24.ro/aii/aelmdruobs","offline","malware_download","BB|H322|H436|qakbot|qbot|quakbot|TR|U425|zip","asr24.ro","89.41.38.48","205275","RO"
"2022-09-28 17:42:15","https://asr24.ro/aii/treisocedhact","offline","malware_download","BB|H322|H436|qakbot|qbot|quakbot|TR|U425|zip","asr24.ro","89.41.38.48","205275","RO"
"2022-09-28 17:42:12","https://asr24.ro/aii/rioebtspmtuipoo","offline","malware_download","BB|H322|H436|qakbot|qbot|quakbot|TR|U425|zip","asr24.ro","89.41.38.48","205275","RO"
"2022-09-28 17:42:10","https://asr24.ro/aii/seenedmsupsauraantmi","offline","malware_download","BB|H322|H436|qakbot|qbot|quakbot|TR|U425|zip","asr24.ro","89.41.38.48","205275","RO"
"2022-09-28 17:42:09","https://asr24.ro/aii/ouevaremt","offline","malware_download","BB|H322|H436|qakbot|qbot|quakbot|TR|U425|zip","asr24.ro","89.41.38.48","205275","RO"
"2022-09-28 17:42:09","https://asr24.ro/aii/peupatslrucaarn","offline","malware_download","BB|H322|H436|qakbot|qbot|quakbot|TR|U425|zip","asr24.ro","89.41.38.48","205275","RO"
"2022-05-16 21:11:05","http://staredefapt.ro/wp-includes/sABxabq6vgSOaVfn/","offline","malware_download","dll|emotet|epoch5|heodo","staredefapt.ro","89.40.72.214","205275","RO"
"2022-05-16 21:11:05","http://www.staredefapt.ro/wp-includes/gGtaPSS67Zz7rn/","offline","malware_download","dll|emotet|epoch5|heodo","www.staredefapt.ro","89.40.72.214","205275","RO"
"2022-05-16 14:50:43","http://roofart.ro/qco/v/pja5bubyo.zip","offline","malware_download","b-TDS|obama183|Qakbot|qbot|zip","roofart.ro","89.42.218.79","205275","RO"
"2022-05-14 01:03:28","http://roofart.ro/qco/HU/dG/Vre6xkzX.zip","offline","malware_download","b-TDS|obama183|Qakbot|qbot|Quakbot|zip","roofart.ro","89.42.218.79","205275","RO"
"2022-05-14 01:03:18","https://roofart.ro/qco/oO/jn/sUcg3UZ6.zip","offline","malware_download","b-TDS|obama183|Qakbot|qbot|Quakbot|zip","roofart.ro","89.42.218.79","205275","RO"
"2022-05-14 01:03:14","https://roofart.ro/qco/V/pJa5bubYO.zip","offline","malware_download","b-TDS|obama183|Qakbot|qbot|Quakbot|zip","roofart.ro","89.42.218.79","205275","RO"
"2022-05-13 18:03:20","http://roofart.ro/qco/9/S2BpcUmGT.zip","offline","malware_download","b-TDS|obama183|Qakbot|qbot|Quakbot|zip","roofart.ro","89.42.218.79","205275","RO"
"2022-04-22 03:38:10","https://scoalatuglui.ro/urr/Sm9/Ixd/lGn/6KCTruI.zip","offline","malware_download","b-TDS|obama177|Qakbot|qbot|zip","scoalatuglui.ro","89.42.218.52","205275","RO"
"2022-04-22 03:38:07","https://scoalatuglui.ro/urr/65q/nE4/MZw/5274bs5.zip","offline","malware_download","b-TDS|obama177|Qakbot|qbot|zip","scoalatuglui.ro","89.42.218.52","205275","RO"
"2022-04-22 03:38:07","https://scoalatuglui.ro/urr/PitmoYHn7u.zip","offline","malware_download","b-TDS|obama177|Qakbot|qbot|zip","scoalatuglui.ro","89.42.218.52","205275","RO"
"2022-04-22 03:38:06","https://scoalatuglui.ro/urr/ct/kp/hPvtxL8u.zip","offline","malware_download","b-TDS|obama177|Qakbot|qbot|zip","scoalatuglui.ro","89.42.218.52","205275","RO"
"2022-04-21 04:05:57","https://scoalatuglui.ro/urr/je/Ds/8lvaDjEE.zip","offline","malware_download","b-TDS|obama177|Qakbot|qbot|Quakbot|zip","scoalatuglui.ro","89.42.218.52","205275","RO"
"2022-04-21 04:05:17","https://scoalatuglui.ro/urr/m/ijcCcEIR4.zip","offline","malware_download","b-TDS|obama177|Qakbot|qbot|Quakbot|zip","scoalatuglui.ro","89.42.218.52","205275","RO"
"2022-04-20 17:39:06","https://scoalatuglui.ro/urr/w/gkfpicELJ.zip","offline","malware_download","obama177|Qakbot|Quakbot","scoalatuglui.ro","89.42.218.52","205275","RO"
"2022-01-27 13:46:09","https://onewaymedia.ro/wp-includes/k/","offline","malware_download","dll|emotet|epoch4|heodo","onewaymedia.ro","89.42.218.209","205275","RO"
"2022-01-12 21:11:10","https://snmobis.ro/wp-content/xA8xQhAu/","offline","malware_download","Emotet","snmobis.ro","89.40.72.90","205275","RO"
"2022-01-11 14:44:04","http://snmobis.ro/wp-content/xA8xQhAu/","offline","malware_download","emotet|epoch4|redir-doc|xls","snmobis.ro","89.40.72.90","205275","RO"
"2022-01-11 14:44:04","http://snmobis.ro/wp-content/xA8xQhAu/?i=1","offline","malware_download","doc|emotet|epoch4|Heodo|SilentBuilder","snmobis.ro","89.40.72.90","205275","RO"
"2021-12-07 16:19:34","https://www.salin.ro/doc/X/HMsp8EWLD.zip","offline","malware_download","Obama141|Qakbot|zip","www.salin.ro","89.42.218.79","205275","RO"
"2021-12-07 16:19:23","https://www.salin.ro/doc/piK/6Jz/XiG/IS3FNaL.zip","offline","malware_download","Obama141|Qakbot|zip","www.salin.ro","89.42.218.79","205275","RO"
"2021-12-07 16:19:22","https://farmacia-organika.ro/doc/L1q/xNH/Bem/D3O2kDZ.zip","offline","malware_download","Obama141|Qakbot|Quakbot|zip","farmacia-organika.ro","89.40.72.233","205275","RO"
"2021-12-07 16:19:17","https://farmacia-organika.ro/doc/uZ/Ua/Yof4JFbU.zip","offline","malware_download","Obama141|Qakbot|Quakbot|zip","farmacia-organika.ro","89.40.72.233","205275","RO"
"2021-12-07 16:19:16","https://www.salin.ro/doc/f4V/Tc9/0g4/LUB0ldZ.zip","offline","malware_download","Obama141|Qakbot|zip","www.salin.ro","89.42.218.79","205275","RO"
"2021-12-07 16:19:10","https://farmacia-organika.ro/doc/1/KAdKWFDc7.zip","offline","malware_download","Obama141|Qakbot|Quakbot|zip","farmacia-organika.ro","89.40.72.233","205275","RO"
"2021-12-07 16:19:10","https://farmacia-organika.ro/doc/cI/1X/5lrDrDAq.zip","offline","malware_download","Obama141|Qakbot|Quakbot|zip","farmacia-organika.ro","89.40.72.233","205275","RO"
"2021-12-07 16:19:10","https://www.managerexpress.ro/doc/k2b/lCP/tbq/NuSikc9.zip","offline","malware_download","Obama141|Qakbot|zip","www.managerexpress.ro","89.42.218.79","205275","RO"
"2021-12-07 16:19:10","https://www.managerexpress.ro/doc/N/pZmDSHxyo.zip","offline","malware_download","Obama141|Qakbot|zip","www.managerexpress.ro","89.42.218.79","205275","RO"
"2021-12-07 16:19:10","https://www.managerexpress.ro/doc/vPl/AIt/Xxf/axbmUiX.zip","offline","malware_download","Obama141|Qakbot|zip","www.managerexpress.ro","89.42.218.79","205275","RO"
"2021-12-07 16:19:10","https://www.salin.ro/doc/1/MkS8vNDnx.zip","offline","malware_download","Obama141|Qakbot|zip","www.salin.ro","89.42.218.79","205275","RO"
"2021-10-15 11:25:16","https://ignaconstruct.ro/etrerum/nonipsa-143446838","offline","malware_download","qbot","ignaconstruct.ro","89.42.218.143","205275","RO"
"2021-10-15 11:25:10","https://ignaconstruct.ro/etrerum/corruptiprovident-143501470","offline","malware_download","qbot","ignaconstruct.ro","89.42.218.143","205275","RO"
"2021-10-06 08:52:06","https://mediaworld.ro/minima-quasi/doloremque.zip","offline","malware_download","","mediaworld.ro","89.42.218.15","205275","RO"
"2021-10-05 13:06:06","https://loyal.ro/ea-non/documents.zip","offline","malware_download","TR|zip","loyal.ro","89.42.218.243","205275","RO"
"2021-10-04 15:25:10","https://funmag.ro/earum-ut/documents.zip","offline","malware_download","TR|zip","funmag.ro","89.42.218.231","205275","RO"
"2021-10-04 15:23:07","https://metalline.ro/sint-eveniet/documents.zip","offline","malware_download","TR|zip","metalline.ro","89.42.218.72","205275","RO"
"2021-10-04 11:08:06","https://enjoytouring.ro/et-ex/quia.zip","offline","malware_download","TR","enjoytouring.ro","89.42.218.39","205275","RO"
"2021-09-30 15:24:08","https://enjoytouring.ro/et-ex/documents.zip","offline","malware_download","squirrelwaffle|TR|zip","enjoytouring.ro","89.42.218.39","205275","RO"
"2021-09-29 13:49:05","https://enjoytouring.ro/et-ex/qui.zip","offline","malware_download","","enjoytouring.ro","89.42.218.39","205275","RO"
"2021-09-29 11:36:39","https://acordimobiliar.ro/qui-quia/rerum.zip","offline","malware_download","","acordimobiliar.ro","89.42.218.99","205275","RO"
"2021-09-29 10:18:22","https://acordimobiliar.ro/qui-quia/documents.zip","offline","malware_download","squirrelwaffle|TR|zip","acordimobiliar.ro","89.42.218.99","205275","RO"
"2021-09-28 15:06:20","https://acordimobiliar.ro/qui-quia/cum.zip","offline","malware_download","SQUIRRELWAFFLE","acordimobiliar.ro","89.42.218.99","205275","RO"
"2021-09-24 18:35:12","https://mediaworld.ro/minima-quasi/documents.zip","offline","malware_download","squirrelwaffle|TR|zip","mediaworld.ro","89.42.218.15","205275","RO"
"2021-09-23 15:30:10","https://westkarpaten.ro/accusantium-eum/documents.zip","offline","malware_download","TR|zip","westkarpaten.ro","89.42.218.164","205275","RO"
"2021-09-23 11:12:16","https://turismtimis.ro/a-quas/documents.zip","offline","malware_download","TR|zip","turismtimis.ro","89.42.218.164","205275","RO"
"2021-09-23 08:11:08","https://chop-shop.ro/maiores-repudiandae/documents.zip","offline","malware_download","TR|zip","chop-shop.ro","89.47.242.199","205275","RO"
"2021-09-23 08:06:08","https://arcb.ro/harum-laborum/documents.zip","offline","malware_download","TR|zip","arcb.ro","89.42.218.232","205275","RO"
"2021-09-22 16:50:16","https://seinsweise.com/laborum-rerum/documents.zip","offline","malware_download","TR|zip","seinsweise.com","89.42.218.164","205275","RO"
"2021-09-22 13:00:24","https://actualitatea-crestina.ro/laudantium-reiciendis/documents.zip","offline","malware_download","TR|zip","actualitatea-crestina.ro","89.42.218.232","205275","RO"
"2021-09-22 13:00:22","https://vladimirghika.ro/et-dolor/documents.zip","offline","malware_download","TR|zip","vladimirghika.ro","89.42.218.232","205275","RO"
"2021-09-22 13:00:15","https://btvideo.ro/neque-magni/documents.zip","offline","malware_download","TR|zip","btvideo.ro","89.42.218.228","205275","RO"
"2021-09-22 13:00:05","https://louloucuisine.ro/expedita-consequatur/documents.zip","offline","malware_download","TR|zip","louloucuisine.ro","89.42.218.94","205275","RO"
"2021-09-22 12:06:06","https://rdrcollect.ro/ad-sunt/documents.zip","offline","malware_download","TR|zip","rdrcollect.ro","89.42.218.226","205275","RO"
"2021-09-21 21:16:04","https://louloucuisine.com/eligendi-soluta/documents.zip","offline","malware_download","TR|zip","louloucuisine.com","89.42.218.94","205275","RO"
"2021-08-25 04:27:16","https://dmcromania.ro/profiler.php","offline","malware_download","","dmcromania.ro","89.33.26.138","205275","RO"
"2021-05-20 14:35:32","https://fotounirii.ro/wp-content/plugins/under-construction-page/themes/000webhost/EYZWDFGxTaDjbR.php","offline","malware_download","","fotounirii.ro","89.41.38.37","205275","RO"
"2021-05-17 14:43:06","https://spectrum.ro/oMbXA/Emma.Jones-87.zip","offline","malware_download","b-TDS|html|Qakbot|Qbot|SilentBuilder|TR|zip","spectrum.ro","89.42.218.47","205275","RO"
"2021-05-17 11:10:04","http://spectrum.ro/oMbXA/joao_alencar-59.zip","offline","malware_download","qbot","spectrum.ro","89.42.218.47","205275","RO"
"2021-04-30 14:03:05","https://greenenergie.ro/wp-content/plugins/elementor/includes/admin-templates/fM2JX6RjAmwQr2.php","offline","malware_download","Dridex","greenenergie.ro","89.40.72.105","205275","RO"
"2021-04-27 15:31:04","https://merty.ro/interaction.php","offline","malware_download","doc|hancitor","merty.ro","89.42.218.45","205275","RO"
"2021-03-17 17:12:06","https://www.ideeadoors.ro/ckeditor/_source/plugins/about/dialogs","offline","malware_download","Dridex","www.ideeadoors.ro","89.42.218.73","205275","RO"
"2021-02-10 14:10:50","http://nordxtremesolutions.ro/smcywzaao.zip","offline","malware_download","Dridex","nordxtremesolutions.ro","86.106.30.44","205275","RO"
"2021-02-10 13:16:27","https://nordxtremesolutions.ro/smcywzaao.zip","offline","malware_download","Dridex","nordxtremesolutions.ro","86.106.30.44","205275","RO"
"2021-02-02 18:55:06","https://www.ideeadoors.ro/ckeditor/_source/plugins/about/dialogs/LFICfpXl","offline","malware_download","Dridex","www.ideeadoors.ro","89.42.218.73","205275","RO"
"2021-02-02 18:31:09","https://www.ideeadoors.ro/ckeditor/_source/plugins/about/dialogs/c4HZxaZ1Prje.php","offline","malware_download","Dridex","www.ideeadoors.ro","89.42.218.73","205275","RO"
"2021-01-29 09:22:05","http://avangardecity.ro/dstu_BkxcHuyze125.bin","offline","malware_download","encrypted|GuLoader","avangardecity.ro","89.42.218.34","205275","RO"
"2020-10-21 10:01:05","http://palestraburns.com/wp-includes/browse/e4pTDHiI8K/","offline","malware_download","doc|emotet|epoch1|Heodo","palestraburns.com","89.42.218.98","205275","RO"
"2020-10-06 18:10:07","http://traducerejuridica.ro/tenlxhlzpagc/625986.png","offline","malware_download","loader|qbot|QuakBot","traducerejuridica.ro","89.42.218.25","205275","RO"
"2020-09-03 18:31:05","http://garden-center.ro/wp-content/http://Documentation/DZlSFDcaQ8Gp1isbD/","offline","malware_download","doc|emotet|epoch1|Heodo","garden-center.ro","89.42.218.34","205275","RO"
"2020-09-02 10:00:08","https://satelitromania.ro/documento.arj","offline","malware_download","","satelitromania.ro","89.42.218.223","205275","RO"
"2020-08-26 12:27:49","http://garden-center.ro/wp-content/ddYzXcaL/","offline","malware_download","emotet|epoch3|exe|Heodo","garden-center.ro","89.42.218.34","205275","RO"
"2020-08-25 18:05:07","http://interact-networks.ro/admin/paclm/iebze-2892/","offline","malware_download","doc|emotet|epoch3|Heodo","interact-networks.ro","89.42.218.31","205275","RO"
"2020-08-14 19:50:16","http://twist.ro/open-cLdv2ZSwq-1slCEllx3z/private_zone/guarded_forum/52933214336_VDGDD1twXiaZgJF/","offline","malware_download","doc|emotet|epoch1|heodo","twist.ro","89.39.246.188","205275","RO"
"2020-08-07 12:42:04","http://www.vladtrans.ro/cgi-bin/docs/c3i8602qj0y2/3bn528528h6keib3kfgi8jo7/","offline","malware_download","doc|emotet|epoch2|heodo","www.vladtrans.ro","89.42.218.31","205275","RO"
"2020-08-06 18:56:07","http://neptunservice.ro/wp-admin/closed_sector/close_forum/z78sbzh_sts20s69z9/","offline","malware_download","doc|emotet|epoch1","neptunservice.ro","89.42.218.245","205275","RO"
"2020-08-06 17:53:35","http://www.neptunservice.ro/wp-admin/closed_sector/close_forum/z78sbzh_sts20s69z9/","offline","malware_download","doc|emotet|epoch1|heodo","www.neptunservice.ro","89.42.218.245","205275","RO"
"2020-08-06 09:31:17","http://twist.ro/wwvv2/lvgutb0upn_qzrlughm37h8_sector/D1zOEk_EBbDGlvNTNug_gopozmilk4_crtjzebig4n3i/15215355_EShrPhOLx/","offline","malware_download","doc|emotet|epoch1|heodo","twist.ro","89.39.246.188","205275","RO"
"2020-08-03 18:31:41","http://www.echipamenteacvarii.ro/wp-/bin_iwlTOFWjHT250.bin","offline","malware_download","encrypted|GuLoader","www.echipamenteacvarii.ro","185.162.64.21","205275","RO"
"2020-07-30 23:27:07","http://cerebralart.ro/blog/closed_module/tt1z_PhYsBFYP48XC3L_cloud/40386520689229_eE6kNn6IZvm4/","offline","malware_download","doc|emotet|epoch1|Heodo","cerebralart.ro","89.42.218.72","205275","RO"
"2020-07-28 22:01:34","http://confricami.eu/css/parts_service/8h1m0yhuzcd/","offline","malware_download","doc|emotet|epoch2|Heodo","confricami.eu","89.42.218.89","205275","RO"
"2020-07-28 14:34:35","http://coruia.ro/ww4w/DwhOxZH/","offline","malware_download","doc|emotet|epoch3|Heodo","coruia.ro","89.42.218.218","205275","RO"
"2020-07-28 13:14:03","http://customgrup.ro/sites/aoiu9571/","offline","malware_download","doc|emotet|epoch2|heodo","customgrup.ro","188.241.142.247","205275","RO"
"2020-07-27 18:02:34","http://casabatraneasca.ro/fonts/070772659-l2kZ1JV-array/test-warehouse/5823966353-F1t4Z8hk6Q9d/","offline","malware_download","doc|emotet|epoch1|heodo","casabatraneasca.ro","89.41.38.184","205275","RO"
"2020-06-17 05:10:24","http://www.iarpp.ro/wp-image/J/ben.bin","offline","malware_download","encrypted|GuLoader","www.iarpp.ro","89.42.218.110","205275","RO"
"2020-06-05 19:26:16","http://iarpp.ro/wp-image/build_RKgxEgf110.bin","offline","malware_download","encrypted|GuLoader","iarpp.ro","89.42.218.110","205275","RO"
"2020-03-06 08:54:55","http://ventilator-aer.ro/wp-content/uploads/2020/02/0303/ginndoe.jp","offline","malware_download","","ventilator-aer.ro","89.42.223.153","205275","RO"
"2020-02-07 02:42:04","http://daclim.ro/generator/LLC/s9mats2/","offline","malware_download","doc|emotet|epoch2|heodo","daclim.ro","89.42.218.238","205275","RO"
"2020-02-06 19:30:04","http://perceptum.ro/awstatsicons/DOC/yqk6ntlj/","offline","malware_download","doc|emotet|epoch2|Heodo","perceptum.ro","89.44.137.250","205275","RO"
"2020-01-28 11:54:14","http://weststop.ro/store/delay.exe","offline","malware_download","","weststop.ro","89.42.218.41","205275","RO"
"2020-01-28 10:41:23","http://www.x3.ro/wp-admin/private-disk/close-area/Tj2j8ddu-K1Jav92I/","offline","malware_download","doc|emotet|epoch1","www.x3.ro","89.47.240.172","205275","RO"
"2020-01-28 09:11:12","http://designknitter.com/wp-admin/report/5rfq8r6/","offline","malware_download","doc|emotet|epoch2|heodo","designknitter.com","89.47.240.172","205275","RO"
"2020-01-28 09:07:17","http://idscanning.ro/wp-admin/1awwjenhog6/2o1134-214-6wivhlm6sk61t1/","offline","malware_download","doc|emotet|epoch2|heodo","idscanning.ro","89.47.240.172","205275","RO"
"2020-01-25 00:44:05","http://backupcom.e-twow.uk/wp-content/public/","offline","malware_download","doc|emotet|epoch2|heodo","backupcom.e-twow.uk","89.39.246.14","205275","RO"
"2020-01-24 13:18:10","http://weststop.ro/store/j.exe","offline","malware_download","exe|NanoCore","weststop.ro","89.42.218.41","205275","RO"
"2020-01-24 13:18:06","http://weststop.ro/store/meet.exe","offline","malware_download","exe|NanoCore","weststop.ro","89.42.218.41","205275","RO"
"2020-01-24 07:55:03","http://e-twow.be/verde/paclm/0tvf3rcbf/","offline","malware_download","doc|emotet|epoch2|heodo","e-twow.be","89.39.246.14","205275","RO"
"2020-01-21 18:10:17","http://e-twow.es/wp-content/dJilYkPOF/","offline","malware_download","emotet|epoch3|exe|Heodo","e-twow.es","89.39.246.14","205275","RO"
"2020-01-21 15:30:06","http://backupcom.e-twow.uk/wp-content/docs/nljx10-963-48486-rpqi-p2479cdxj5/","offline","malware_download","doc|emotet|epoch2|heodo","backupcom.e-twow.uk","89.39.246.14","205275","RO"
"2020-01-21 14:46:15","http://e-twow.be/verde/in6k/","offline","malware_download","emotet|epoch2|exe|Heodo","e-twow.be","89.39.246.14","205275","RO"
"2020-01-14 08:45:08","http://www.genpersonal.ro/jscripts/sites/3l7dvhxg/","offline","malware_download","doc|emotet|epoch2|Heodo","www.genpersonal.ro","194.102.33.117","205275","RO"
"2019-10-09 23:39:16","http://cjextm.ro/wp-snapshots/oDjcwvxm/","offline","malware_download","emotet|epoch2|exe|Heodo","cjextm.ro","89.42.218.211","205275","RO"
"2019-10-09 06:12:50","http://pontus-euxinus.ro/wp-admin/eiqCOgkzFcqVmErAgpqlcyqqp/","offline","malware_download","doc|emotet|epoch2|heodo","pontus-euxinus.ro","89.42.218.8","205275","RO"
"2019-09-16 16:44:07","https://blnautoclub.ro/wp-admin/LLC/yPHOKncKuBeunjIjOOqSFnOYv/","offline","malware_download","doc|Emotet|epoch2|Heodo","blnautoclub.ro","89.42.218.142","205275","RO"
"2019-05-23 20:21:05","https://dodoli.ro/wp-admin/FILE/DkLECyzuOBWgSM/","offline","malware_download","doc|Emotet|epoch2|Heodo","dodoli.ro","89.44.137.195","205275","RO"
"2019-05-20 12:11:16","http://azbeton.ro/wp-content/Document/vtjHcnFgqglXQqzqEkohRLJd/","offline","malware_download","doc|emotet|epoch2|Heodo","azbeton.ro","89.42.218.209","205275","RO"
"2019-05-08 19:04:22","http://intertexbrasov.ro/wp-admin/m5sigejrxl_dtjzp-2161/","offline","malware_download","emotet|epoch2|exe|Heodo","intertexbrasov.ro","188.241.142.151","205275","RO"
"2019-04-30 18:33:07","http://msecurity.ro/sites/Scan/a35818wM/","offline","malware_download","doc|emotet|epoch2|Heodo","msecurity.ro","89.42.218.211","205275","RO"
"2019-04-30 15:39:02","http://powerfishing.ro/pdf/FILE/J41CrOc5U9J9/","offline","malware_download","doc|emotet|epoch2|Heodo","powerfishing.ro","89.42.218.9","205275","RO"
"2019-04-29 19:16:03","https://dodoli.ro/mrvr/secure.accs.docs.biz/","offline","malware_download","doc|emotet|epoch1|Heodo","dodoli.ro","89.44.137.195","205275","RO"
"2019-04-26 16:41:08","https://dodoli.ro/mrvr/Kyob-RZB4WcDibj9o8z_jDrDpzEsh-Gr/","offline","malware_download","doc|emotet|epoch1","dodoli.ro","89.44.137.195","205275","RO"
"2019-04-24 14:14:02","http://powerfishing.ro/pdf/cXIF-OZJg9sG8cS67aI_ZCJrTUtA-If/","offline","malware_download","doc|emotet|epoch1|Heodo","powerfishing.ro","89.42.218.9","205275","RO"
"2019-04-23 21:59:03","http://msecurity.ro/sites/etcB-oNJrRcKGdAjwfUX_daiKkMJi-SFC/","offline","malware_download","doc|emotet|epoch1|Heodo","msecurity.ro","89.42.218.211","205275","RO"
"2019-04-18 23:18:04","http://msecurity.ro/sites/QZbJ-lbBvrr2v8Rh0sm_mNTKUPRzj-BK/","offline","malware_download","doc|emotet|epoch1","msecurity.ro","89.42.218.211","205275","RO"
"2019-04-16 13:59:03","http://msecurity.ro/sites/qylQ-I6xsccK9GYn0fr_OJNmAoDi-yKL/","offline","malware_download","doc|emotet|epoch1|Heodo","msecurity.ro","89.42.218.211","205275","RO"
"2019-04-12 07:08:04","http://msecurity.ro/sites/AVwFJ-G9hAOrLNMzyhXc_uPepUfaq-z1/","offline","malware_download","doc|emotet|epoch2|Heodo","msecurity.ro","89.42.218.211","205275","RO"
"2019-04-10 05:42:08","http://msecurity.ro/sites/8894bt-u8wb4-dude/","offline","malware_download","Emotet|Heodo","msecurity.ro","89.42.218.211","205275","RO"
"2019-04-05 22:46:29","http://msecurity.ro/sites/oUPVK-TtmbIp1kLiq27e_KCiNBxtqQ-st/","offline","malware_download","doc|emotet|epoch1|Heodo","msecurity.ro","89.42.218.211","205275","RO"
"2019-03-29 21:14:37","http://powerfishing.ro/pdf/NYyVk-LkLo_JGnfbn-0ry/","offline","malware_download","Emotet|Heodo","powerfishing.ro","89.42.218.9","205275","RO"
"2019-03-27 19:36:26","http://powerfishing.ro/pdf/pIjr-upuO9_qj-xVb/","offline","malware_download","Emotet|Heodo","powerfishing.ro","89.42.218.9","205275","RO"
"2019-03-19 15:27:17","http://rowebstyle.com/a/out-750521680.ps1","offline","malware_download","","rowebstyle.com","89.42.218.50","205275","RO"
"2019-03-15 20:48:11","https://oneexpo.ro/wp-content/p2qd-gkm1gp-zcxg/","offline","malware_download","Emotet|Heodo","oneexpo.ro","89.42.218.147","205275","RO"
"2019-03-15 13:31:05","http://msecurity.ro/misc/wfu2-zwwg8b-zuhjmq/","offline","malware_download","doc|emotet|epoch2|Heodo","msecurity.ro","89.42.218.211","205275","RO"
"2018-12-18 12:37:07","http://ziarulrevolutionarul.ro/templates/protostar/less/sserv.jpg","offline","malware_download","exe","ziarulrevolutionarul.ro","89.42.218.217","205275","RO"
"2018-12-18 10:52:03","http://ziarulrevolutionarul.ro/templates/protostar/css/sserv.jpg","offline","malware_download","exe","ziarulrevolutionarul.ro","89.42.218.217","205275","RO"
"2018-12-05 06:28:20","http://drajna.ro/554YWMTAF/VNTPIDVR5660013/Rechnung/RECH/","offline","malware_download","doc|emotet|epoch2|Heodo","drajna.ro","89.42.218.209","205275","RO"
"2018-12-04 14:26:22","http://drajna.ro/554YWMTAF/VNTPIDVR5660013/Rechnung/RECH","offline","malware_download","doc|emotet|heodo","drajna.ro","89.42.218.209","205275","RO"
"2018-10-26 01:40:03","http://proinstalco.ro/NERT_23.10.2018.jar","offline","malware_download","zip","proinstalco.ro","89.41.38.20","205275","RO"
"2018-10-25 14:05:03","http://proinstalco.ro/Lists_of_Agents.jar","offline","malware_download","","proinstalco.ro","89.41.38.20","205275","RO"
"2018-10-08 20:49:02","http://placarepiatra.ro/testbricostone/DOC/EN_en/Past-Due-Invoices","offline","malware_download","doc|Heodo","placarepiatra.ro","89.42.218.41","205275","RO"
"2018-10-08 15:49:33","http://termodinamic.ro/FILE/Auditor-of-State-Notification-of-EFT-Deposit","offline","malware_download","doc|emotet","termodinamic.ro","89.33.44.139","205275","RO"
"2018-10-08 15:15:05","http://placarepiatra.ro/xerox/US_us/Past-Due-Invoice","offline","malware_download","Heodo","placarepiatra.ro","89.42.218.41","205275","RO"
"2018-10-08 15:15:04","http://placarepiatra.ro/doc/EN_en/Invoice","offline","malware_download","Heodo","placarepiatra.ro","89.42.218.41","205275","RO"
"2018-10-08 10:06:04","http://www.placarepiatra.ro/testbricostone/DOC/EN_en/Past-Due-Invoices/","offline","malware_download","doc|Heodo","www.placarepiatra.ro","89.42.218.41","205275","RO"
"2018-10-08 10:05:03","http://www.placarepiatra.ro/doc/EN_en/Invoice","offline","malware_download","doc|Heodo","www.placarepiatra.ro","89.42.218.41","205275","RO"
"2018-10-08 06:31:39","http://www.placarepiatra.ro/xerox/US_us/Past-Due-Invoice","offline","malware_download","doc|emotet|heodo","www.placarepiatra.ro","89.42.218.41","205275","RO"
"2018-09-24 13:49:49","http://termodinamic.ro/Rechnungszahlung/Rechnungsanschrift-korrigiert","offline","malware_download","doc|emotet","termodinamic.ro","89.33.44.139","205275","RO"
"2018-09-17 08:56:07","https://www.optimbirou.ro/crm/custom/FR112014754114.zip","offline","malware_download","FRA|TinyNuke|zipped-MZ","www.optimbirou.ro","89.42.218.56","205275","RO"
"2018-08-02 09:53:04","http://iulius.eu/files/Rechnungs/DETAILS/RechnungScan-YWQ-35-40351","offline","malware_download","DOC|Emotet|Heodo","iulius.eu","89.42.218.235","205275","RO"
"2018-08-01 16:11:59","http://iulius.eu/files/Rechnungs/DETAILS/RechnungScan-YWQ-35-40351/","offline","malware_download","doc|emotet|epoch2|Heodo","iulius.eu","89.42.218.235","205275","RO"
"2018-07-31 03:34:31","http://mobilaok.ro/DHL-number/En_us/","offline","malware_download","doc|emotet|epoch2|Heodo","mobilaok.ro","89.42.218.194","205275","RO"
"2018-07-30 19:12:42","http://iulius.eu/DHL-Tracking/EN_en/","offline","malware_download","doc|emotet|epoch2|Heodo","iulius.eu","89.42.218.235","205275","RO"
"2018-07-27 04:07:39","http://mobilaok.ro/Tracking/En/","offline","malware_download","doc|emotet|epoch2|Heodo","mobilaok.ro","89.42.218.194","205275","RO"
"2018-07-25 03:59:42","http://mobilaok.ro/files/US/Past-Due-Invoices/Account-53659/","offline","malware_download","doc|emotet|epoch2|Heodo","mobilaok.ro","89.42.218.194","205275","RO"
"2018-07-24 08:58:07","http://mobilaok.ro/files/US/Past-Due-Invoices/Account-53659","offline","malware_download","doc|emotet|Heodo","mobilaok.ro","89.42.218.194","205275","RO"
"2018-07-24 05:31:14","http://hairstage.ro/wp-content/uploads/doc/US/OVERDUE-ACCOUNT/invoice/","offline","malware_download","doc|emotet|epoch2|Heodo","hairstage.ro","89.42.218.45","205275","RO"
"2018-07-23 19:15:10","http://hairstage.ro/wp-content/uploads/doc/US/OVERDUE-ACCOUNT/invoice","offline","malware_download","doc|emotet|heodo","hairstage.ro","89.42.218.45","205275","RO"
"2018-07-18 22:50:48","http://mobilaok.ro/Facturas/","offline","malware_download","doc|emotet|epoch1|Heodo","mobilaok.ro","89.42.218.194","205275","RO"
"2018-07-17 09:14:19","http://mobilaok.ro/doc/En/Jul2018/Order-36249338869","offline","malware_download","doc|emotet|heodo","mobilaok.ro","89.42.218.194","205275","RO"
"2018-07-17 00:28:44","http://mobilaok.ro/doc/En/Jul2018/Order-36249338869/","offline","malware_download","doc|emotet|epoch2|Heodo","mobilaok.ro","89.42.218.194","205275","RO"
"2018-07-13 17:11:02","http://hairstage.ro/wp-content/uploads/doc/US_us/INVOICE-STATUS/tracking-number-and-invoice-of-your-order/","offline","malware_download","doc|emotet|epoch2|Heodo","hairstage.ro","89.42.218.45","205275","RO"
"2018-06-18 18:31:32","http://termodinamic.ro/FILE/Auditor-of-State-Notification-of-EFT-Deposit/","offline","malware_download","emotet|Heodo","termodinamic.ro","89.33.44.139","205275","RO"
"2018-06-15 17:22:43","http://bostik.com.ro/6koI2ip/","offline","malware_download","Heodo","bostik.com.ro","89.42.218.23","205275","RO"
"2018-06-12 18:13:05","http://www.bostik.com.ro/6koI2ip/","offline","malware_download","emotet|epoch1|Heodo|payload","www.bostik.com.ro","89.42.218.23","205275","RO"
"2018-06-12 14:04:03","http://termodinamic.ro/ACCOUNT/Payment/","offline","malware_download","doc|emotet|Formbook|Heodo","termodinamic.ro","89.33.44.139","205275","RO"
"2018-06-06 15:59:25","http://termodinamic.ro/Rechnungszahlung/Rechnungsanschrift-korrigiert/","offline","malware_download","doc|emotet|Heodo","termodinamic.ro","89.33.44.139","205275","RO"
"2018-06-04 12:01:04","http://thermo-logos.ro/ups.com/WebTracking/CY-8499307413835/","offline","malware_download","","thermo-logos.ro","89.42.218.23","205275","RO"
"2018-05-29 20:27:14","http://thermo-logos.ro/Facturation/","offline","malware_download","doc|emotet|Heodo","thermo-logos.ro","89.42.218.23","205275","RO"
"2018-05-10 19:39:48","http://thermo-logos.ro/PbsTqmcd/","offline","malware_download","doc|emotet|Heodo","thermo-logos.ro","89.42.218.23","205275","RO"
"2018-04-26 17:35:30","http://arendatelesti.ro/Qkq1aslpZAa8Hlt/","offline","malware_download","doc|emotet|Heodo","arendatelesti.ro","89.42.218.195","205275","RO"
"2018-04-01 07:21:59","http://testebac.ro/ohhi.exe","offline","malware_download","gandcrab","testebac.ro","89.42.218.88","205275","RO"
"2018-03-29 10:36:27","http://grainbags.ro/Rechnung-Nr-67138/78180XD/","offline","malware_download"," doc| emotet|heodo","grainbags.ro","89.41.38.92","205275","RO"
"2018-03-29 07:28:05","http://montecarlopalace.eu/qlfvwxy.exe","offline","malware_download","exe|retefe","montecarlopalace.eu","89.42.218.36","205275","RO"
"2018-03-23 14:13:19","http://naturashop.ro/WIRE-FORM/VP-1165023361287/","offline","malware_download","doc|Emotet|Heodo","naturashop.ro","89.41.38.22","205275","RO"
# of entries: 284