##############################################################################
# URLhaus ASN CSV Feed                                                       #
# Generated on 2025-11-18 22:40:16 UTC                                       #
#                                                                            #
# For questions please refer to:                                             #
# https://urlhaus.abuse.ch/feeds/                                            #
##############################################################################
#
# Feed generated for AS29873
#
# Dateadded (UTC),URL,URL_status,Threat,Tags,Host,IPaddress,ASnumber,Country
"2025-04-07 13:11:06","https://liddar.ca/wp-content/Wia64.zip","offline","malware_download","netsupport","liddar.ca","66.96.160.139","29873","US"
"2025-03-02 20:17:11","https://bmdcompany.com/","online","malware_download","censys|ClickFix|FakeCaptcha|html","bmdcompany.com","66.96.149.24","29873","US"
"2024-10-16 15:24:17","http://dcdsecurity.com/support/AMMYY.zip","offline","malware_download","FlawedAmmyRAT","dcdsecurity.com","66.96.149.32","29873","US"
"2024-08-20 21:50:06","https://bysc.loyalty.hienphucuanhanloai.org/orderReview","offline","malware_download","socgholish","bysc.loyalty.hienphucuanhanloai.org","65.254.248.136","29873","US"
"2024-07-30 21:38:05","https://zcfg.parish.chuathuongxot.org/orderReview","offline","malware_download","socgholish","zcfg.parish.chuathuongxot.org","65.254.248.136","29873","US"
"2024-07-28 07:28:12","https://ufyn.loyalty.hienphucuanhanloai.org/orderReview","offline","malware_download","socgholish","ufyn.loyalty.hienphucuanhanloai.org","65.254.248.136","29873","US"
"2024-07-27 11:09:15","https://solarizing.co.uk/1.exe","offline","malware_download","exe|Smoke Loader","solarizing.co.uk","66.96.149.28","29873","US"
"2024-07-27 05:24:05","https://cjou.loyalty.hienphucuanhanloai.org/orderReview","offline","malware_download","socgholish","cjou.loyalty.hienphucuanhanloai.org","65.254.248.136","29873","US"
"2024-07-27 00:24:06","https://ggpi.loyalty.hienphucuanhanloai.org/orderReview","offline","malware_download","socgholish","ggpi.loyalty.hienphucuanhanloai.org","65.254.248.136","29873","US"
"2024-07-26 20:23:04","https://maa.parish.chuathuongxot.org/orderReview","offline","malware_download","socgholish","maa.parish.chuathuongxot.org","65.254.248.136","29873","US"
"2024-07-26 12:22:07","https://ruym.loyalty.hienphucuanhanloai.org/orderReview","offline","malware_download","socgholish","ruym.loyalty.hienphucuanhanloai.org","65.254.248.136","29873","US"
"2024-07-26 04:21:05","https://gzw.loyalty.hienphucuanhanloai.org/orderReview","offline","malware_download","socgholish","gzw.loyalty.hienphucuanhanloai.org","65.254.248.136","29873","US"
"2024-07-25 21:20:07","https://qxup.loyalty.hienphucuanhanloai.org/orderReview","offline","malware_download","socgholish","qxup.loyalty.hienphucuanhanloai.org","65.254.248.136","29873","US"
"2024-07-25 01:16:05","https://xdfds.loyalty.hienphucuanhanloai.org/orderReview","offline","malware_download","socgholish","xdfds.loyalty.hienphucuanhanloai.org","65.254.248.136","29873","US"
"2024-07-25 00:15:10","https://poka.award.vuheritagefoundation.org/orderReview","offline","malware_download","socgholish","poka.award.vuheritagefoundation.org","65.254.248.136","29873","US"
"2024-07-24 21:15:07","https://frtwv.loyalty.hienphucuanhanloai.org/orderReview","offline","malware_download","socgholish","frtwv.loyalty.hienphucuanhanloai.org","65.254.248.136","29873","US"
"2024-07-24 19:15:07","https://kuzo.loyalty.hienphucuanhanloai.org/orderReview","offline","malware_download","socgholish","kuzo.loyalty.hienphucuanhanloai.org","65.254.248.136","29873","US"
"2024-07-24 18:15:07","https://fljnd.loyalty.hienphucuanhanloai.org/orderReview","offline","malware_download","socgholish","fljnd.loyalty.hienphucuanhanloai.org","65.254.248.136","29873","US"
"2024-07-24 17:14:06","https://hmen.loyalty.hienphucuanhanloai.org/orderReview","offline","malware_download","socgholish","hmen.loyalty.hienphucuanhanloai.org","65.254.248.136","29873","US"
"2024-07-22 04:06:06","https://zcmkd.award.vuheritagefoundation.org/orderReview","offline","malware_download","socgholish","zcmkd.award.vuheritagefoundation.org","65.254.248.136","29873","US"
"2024-07-21 17:05:06","https://eqht.award.vuheritagefoundation.org/orderReview","offline","malware_download","socgholish","eqht.award.vuheritagefoundation.org","65.254.248.136","29873","US"
"2024-07-18 19:56:07","https://lpl.award.vuheritagefoundation.org/orderReview","offline","malware_download","socgholish","lpl.award.vuheritagefoundation.org","65.254.248.136","29873","US"
"2024-07-17 20:54:34","https://vaj.parish.chuathuongxot.org/orderReview","offline","malware_download","socgholish","vaj.parish.chuathuongxot.org","65.254.248.136","29873","US"
"2024-07-16 23:51:08","https://run.award.vuheritagefoundation.org/orderReview","offline","malware_download","socgholish","run.award.vuheritagefoundation.org","65.254.248.136","29873","US"
"2024-07-16 18:50:14","https://zropx.award.vuheritagefoundation.org/orderReview","offline","malware_download","socgholish","zropx.award.vuheritagefoundation.org","65.254.248.136","29873","US"
"2024-07-15 20:47:09","https://swuz.award.vuheritagefoundation.org/orderReview","offline","malware_download","socgholish","swuz.award.vuheritagefoundation.org","65.254.248.136","29873","US"
"2024-07-15 19:47:08","https://ioj.award.vuheritagefoundation.org/orderReview","offline","malware_download","socgholish","ioj.award.vuheritagefoundation.org","65.254.248.136","29873","US"
"2024-07-15 18:47:11","https://kpe.parish.chuathuongxot.org/orderReview","offline","malware_download","socgholish","kpe.parish.chuathuongxot.org","65.254.248.136","29873","US"
"2024-07-15 16:47:15","https://yff.parish.chuathuongxot.org/orderReview","offline","malware_download","socgholish","yff.parish.chuathuongxot.org","65.254.248.136","29873","US"
"2024-07-15 16:47:15","https://ymxzm.award.vuheritagefoundation.org/orderReview","offline","malware_download","socgholish","ymxzm.award.vuheritagefoundation.org","65.254.248.136","29873","US"
"2024-07-14 17:44:08","https://dhp.parish.chuathuongxot.org/orderReview","offline","malware_download","socgholish","dhp.parish.chuathuongxot.org","65.254.248.136","29873","US"
"2024-07-14 17:44:08","https://vzq.parish.chuathuongxot.org/orderReview","offline","malware_download","socgholish","vzq.parish.chuathuongxot.org","65.254.248.136","29873","US"
"2024-07-14 04:42:30","https://rolqo.parish.chuathuongxot.org/orderReview","offline","malware_download","socgholish","rolqo.parish.chuathuongxot.org","65.254.248.136","29873","US"
"2024-07-12 20:37:13","https://oey.parish.chuathuongxot.org/orderReview","offline","malware_download","socgholish","oey.parish.chuathuongxot.org","65.254.248.136","29873","US"
"2024-07-12 19:37:11","https://zznc.parish.chuathuongxot.org/orderReview","offline","malware_download","socgholish","zznc.parish.chuathuongxot.org","65.254.248.136","29873","US"
"2024-07-12 16:37:13","https://kaoj.parish.chuathuongxot.org/orderReview","offline","malware_download","socgholish","kaoj.parish.chuathuongxot.org","65.254.248.136","29873","US"
"2024-07-11 19:34:14","https://otoy.parish.chuathuongxot.org/orderReview","offline","malware_download","socgholish","otoy.parish.chuathuongxot.org","65.254.248.136","29873","US"
"2024-07-11 18:34:14","https://lgdvg.parish.chuathuongxot.org/orderReview","offline","malware_download","socgholish","lgdvg.parish.chuathuongxot.org","65.254.248.136","29873","US"
"2024-07-10 01:29:09","https://qgln.parish.chuathuongxot.org/orderReview","offline","malware_download","socgholish","qgln.parish.chuathuongxot.org","65.254.248.136","29873","US"
"2024-07-08 21:25:11","https://hlug.parish.chuathuongxot.org/orderReview","offline","malware_download","socgholish","hlug.parish.chuathuongxot.org","65.254.248.136","29873","US"
"2024-07-08 18:25:17","https://yayj.parish.chuathuongxot.org/orderReview","offline","malware_download","socgholish","yayj.parish.chuathuongxot.org","65.254.248.136","29873","US"
"2023-09-04 05:24:08","https://sapiens-services.com/viewer/InstallYourTool.rar","offline","malware_download","4545|password-protected|rar","sapiens-services.com","66.96.162.140","29873","US"
"2023-05-23 13:07:14","https://foneunits.com/cois/?1","offline","malware_download","geofenced|js|Pikabot|Qakbot|USA","foneunits.com","66.96.147.168","29873","US"
"2023-05-22 14:53:19","https://v-onerotate.com/umc/?1","offline","malware_download","geofenced|js|Pikabot|Qakbot|Quakbot|USA","v-onerotate.com","66.96.147.103","29873","US"
"2023-05-10 15:08:17","https://brightadvocate.com/ds/","offline","malware_download","BB27|geofenced|js|Qakbot|Quakbot|USA","brightadvocate.com","207.148.248.143","29873","US"
"2023-05-04 10:57:14","https://supercolor.com.co/du/","offline","malware_download","BB26|js|Qakbot|Quakbot|USA|zip","supercolor.com.co","66.96.147.102","29873","US"
"2023-03-14 19:00:51","https://www.hygeiaindia.biz/agenzia/","offline","malware_download","250255|7710|geofenced|Gozi|ISFB|ITA|redir-302|Ursnif","www.hygeiaindia.biz","66.96.146.79","29873","US"
"2023-03-14 19:00:46","https://www.hygeiaindia.biz/scarica/","offline","malware_download","250255|7710|geofenced|Gozi|ISFB|ITA|redir-302|Ursnif","www.hygeiaindia.biz","66.96.146.79","29873","US"
"2023-03-14 19:00:18","https://www.hygeiaindia.biz/connect/","offline","malware_download","250255|7710|geofenced|Gozi|ISFB|ITA|redir-302|Ursnif","www.hygeiaindia.biz","66.96.146.79","29873","US"
"2022-11-03 21:37:12","http://ftp.pricoat.com.mx/Fichas/3ybJLLXu5zqqn8Sx/","offline","malware_download","dll|emotet|epoch5|heodo","ftp.pricoat.com.mx","66.96.132.64","29873","US"
"2022-10-18 05:46:04","http://keziheritier.com/z2.exe","offline","malware_download","32|exe","keziheritier.com","66.96.149.30","29873","US"
"2022-10-18 05:34:11","https://keziheritier.com/7.exe","offline","malware_download","32|exe|RedLineStealer","keziheritier.com","66.96.149.30","29873","US"
"2022-10-16 06:43:13","https://keziheritier.com/jamesp.exe","offline","malware_download","32|exe|RedLineStealer","keziheritier.com","66.96.149.30","29873","US"
"2022-09-19 03:42:12","https://www.mzseries.com/3.exe","offline","malware_download","32|exe|RedLineStealer","www.mzseries.com","66.96.149.1","29873","US"
"2022-06-09 09:04:34","https://almightycoders.com/fatt/COPIA_FATTURA_05052259769.zip","offline","malware_download","","almightycoders.com","207.148.248.143","29873","US"
"2022-06-09 09:04:22","https://almightycoders.com/doc/FATT_050522J9471W.zip","offline","malware_download","","almightycoders.com","207.148.248.143","29873","US"
"2022-05-12 20:45:08","http://interstatephoto.com/v-web/Rf8D20v/","offline","malware_download","dll|emotet|epoch4|heodo","interstatephoto.com","66.96.132.61","29873","US"
"2022-04-27 21:18:05","http://hilse.me/wp-content/DTN/","offline","malware_download","dll|emotet|epoch4|Heodo","hilse.me","66.96.147.168","29873","US"
"2022-04-27 07:34:05","https://txpcrescue.com/cgi-bin/j6dLSsv1R82q7vAUYlC/","offline","malware_download","dll|emotet|epoch5|Heodo","txpcrescue.com","66.96.147.113","29873","US"
"2022-03-31 17:28:06","https://txpcrescue.com/cgi-bin/5tSO8/","offline","malware_download","dll|emotet|epoch4|heodo","txpcrescue.com","66.96.147.113","29873","US"
"2022-03-30 14:18:04","http://hilse.me/wp-content/hCCVu10p7R/?i=1","offline","malware_download","c8fc17ff030feb3383d8889f69abbb|doc|emotet|epoch4|Heodo|SilentBuilder","hilse.me","66.96.147.168","29873","US"
"2022-03-30 14:18:03","http://hilse.me/wp-content/hCCVu10p7R/","offline","malware_download","c8fc17ff030feb3383d8889f69abbb|emotet|epoch4|Heodo|redir-doc|xls","hilse.me","66.96.147.168","29873","US"
"2022-03-27 22:46:07","http://chmiola.net/audio/6OuzyjPS/","offline","malware_download","dll|emotet|epoch4|Heodo","chmiola.net","66.96.134.97","29873","US"
"2022-01-20 13:43:09","http://www.serafiliado.com/wp-admin/V1/?i=1","offline","malware_download","doc|emotet|epoch4|Heodo","www.serafiliado.com","66.96.133.16","29873","US"
"2022-01-20 13:43:07","http://www.serafiliado.com/wp-admin/V1/","offline","malware_download","emotet|epoch4|redir-doc|xls","www.serafiliado.com","66.96.133.16","29873","US"
"2022-01-11 16:52:05","http://www.easyprotocols.com/blog2/mXyTuU7Iog67cqYYJ/","offline","malware_download","emotet|epoch4|redir-doc|xls","www.easyprotocols.com","66.96.133.16","29873","US"
"2022-01-11 16:52:05","http://www.easyprotocols.com/blog2/mXyTuU7Iog67cqYYJ/?i=1","offline","malware_download","doc|emotet|epoch4|Heodo","www.easyprotocols.com","66.96.133.16","29873","US"
"2022-01-02 00:20:15","https://adeoba.com/Setup.exe","offline","malware_download","","adeoba.com","66.96.146.129","29873","US"
"2021-07-13 07:50:09","http://i55fundraising.com/setup_c.exe","offline","malware_download","32|exe","i55fundraising.com","66.96.149.1","29873","US"
"2021-07-12 23:36:07","http://i55fundraising.com/newApps.exe","offline","malware_download","exe","i55fundraising.com","66.96.149.1","29873","US"
"2021-07-10 19:44:05","http://i55fundraising.com/instalKP.exe","offline","malware_download","32|exe|RedLineStealer","i55fundraising.com","66.96.149.1","29873","US"
"2021-07-10 05:41:09","http://i55fundraising.com/Jople.exe","offline","malware_download","32|exe|RedLineStealer","i55fundraising.com","66.96.149.1","29873","US"
"2021-07-10 05:36:06","http://i55fundraising.com/batman.exe","offline","malware_download","32|ArkeiStealer|exe","i55fundraising.com","66.96.149.1","29873","US"
"2021-07-10 05:36:04","http://i55fundraising.com/jop.exe","offline","malware_download","32|exe|RedLineStealer","i55fundraising.com","66.96.149.1","29873","US"
"2021-07-10 05:32:06","http://i55fundraising.com/batgo.exe","offline","malware_download","32|ArkeiStealer|exe","i55fundraising.com","66.96.149.1","29873","US"
"2021-07-10 05:28:07","http://i55fundraising.com/bat_update.exe","offline","malware_download","32|ArkeiStealer|exe","i55fundraising.com","66.96.149.1","29873","US"
"2021-07-10 05:13:07","http://i55fundraising.com/bat_english.exe","offline","malware_download","32|ArkeiStealer|exe","i55fundraising.com","66.96.149.1","29873","US"
"2021-07-01 16:01:22","https://envsciencegroup.com/wp-content/plugins/newsletter/statistics/images/gfxwjmG16KN.php","offline","malware_download","dll|dridex","envsciencegroup.com","66.96.130.139","29873","US"
"2021-04-26 20:56:18","https://cancunsailingtours.com/wp_site_1610302384/j3BjQyd9svk.php","offline","malware_download","Dridex","cancunsailingtours.com","66.96.149.32","29873","US"
"2021-04-21 18:03:08","https://www.volsr.org/wp-content/plugins/w3-total-cache/inc/email/rVC4EhMUt.php","offline","malware_download","Dridex","www.volsr.org","66.96.147.96","29873","US"
"2021-03-31 12:38:04","https://portal.premiumpunch.com/gaxeap.tar","offline","malware_download","Dridex","portal.premiumpunch.com","207.148.248.143","29873","US"
"2021-02-17 15:33:26","https://m.softsharks.com/gnb7ev2pv.zip","offline","malware_download","Dridex","m.softsharks.com","207.148.248.143","29873","US"
"2021-01-20 16:00:09","http://artistascitizen.com/wp-content/Bx3cr6/","offline","malware_download","emotet|epoch1|exe|heodo","artistascitizen.com","66.96.149.32","29873","US"
"2020-12-29 20:30:07","http://nahlasolimandesigns.com/wp-admin/0HHK7/","offline","malware_download","emotet|epoch2|exe|Heodo","nahlasolimandesigns.com","65.254.248.139","29873","US"
"2020-12-29 09:05:03","https://nahlasolimandesigns.com/wp-admin/0HHK7/","offline","malware_download","emotet|epoch2|exe|heodo","nahlasolimandesigns.com","65.254.248.139","29873","US"
"2020-12-22 07:37:05","https://nahlasolimandesigns.com/nahla3/d/","offline","malware_download","emotet|epoch1|exe|heodo","nahlasolimandesigns.com","65.254.248.139","29873","US"
"2020-12-09 20:10:29","https://www.educationknot.com/ci4ivm.zip","offline","malware_download","Dridex","www.educationknot.com","207.148.248.143","29873","US"
"2020-10-28 21:35:10","http://77st.net/99/N/","offline","malware_download","doc|emotet|epoch2|Heodo","77st.net","66.96.147.110","29873","US"
"2020-10-26 22:16:05","https://www.theaffiliateincome.com/theaffiliateincome/Avuc/","offline","malware_download","emotet|epoch2|exe|Heodo","www.theaffiliateincome.com","66.96.149.32","29873","US"
"2020-10-26 14:40:07","https://humanresourceslifeline.com/wp-content/Documentation/jMe4PpvS9x4QO8N6a1/","offline","malware_download","doc|emotet|epoch1|Heodo","humanresourceslifeline.com","66.96.149.1","29873","US"
"2020-10-21 10:14:08","https://helpingcause.com/c5wdzk5l.rar","offline","malware_download","Dridex","helpingcause.com","207.148.248.143","29873","US"
"2020-09-28 13:14:10","https://www.taxcentric.ca/swlzlqi.zip","offline","malware_download","Dridex|exe","www.taxcentric.ca","66.96.147.106","29873","US"
"2020-09-14 07:35:05","http://kern-egypt.com/wp-admin/0718EX5P1FC/","offline","malware_download","doc|emotet|epoch2|heodo","kern-egypt.com","65.254.248.139","29873","US"
"2020-08-28 14:41:21","http://euphoria.no/bilder/swift/2107329258009/sN/","offline","malware_download","doc|emotet|epoch3|Heodo","euphoria.no","209.59.202.31","29873","US"
"2020-08-25 23:16:13","http://euphoria.no/bilder/paclm/b0yups0n/u9999634226247dm9c57xodk4hz/","offline","malware_download","doc|emotet|epoch2|heodo","euphoria.no","209.59.202.31","29873","US"
"2020-08-25 13:38:06","http://nnpnews.com/2007/230092/","offline","malware_download","doc|emotet|epoch2|heodo","nnpnews.com","66.96.149.18","29873","US"
"2020-08-20 13:55:06","http://euphoria.no/bilder/lm/","offline","malware_download","doc|emotet|epoch2|heodo","euphoria.no","209.59.202.31","29873","US"
"2020-08-19 20:02:04","http://genek.com/common-resource/paclm/","offline","malware_download","doc|emotet|epoch2|Heodo","genek.com","66.96.146.129","29873","US"
"2020-08-17 19:41:34","http://genek.com/common-resource/8xr-lyx5ltu6-2jm1j-5z0m5o/r991ZaROdSRZ-tsmIu0mdIx0/","offline","malware_download","doc|emotet|epoch1|Heodo","genek.com","66.96.146.129","29873","US"
"2020-08-14 01:40:09","http://posmicrosystems.com/Scan/vw3tl6d9/","offline","malware_download","doc|emotet|epoch2|heodo","posmicrosystems.com","66.96.146.84","29873","US"
"2020-08-13 23:37:08","http://euphoria.no/mail.euphoria.no/72HrVPGn3A-CUyOxy8-zone/verifiable-area/425xbd4gtdw-s8zz4604030/","offline","malware_download","doc|emotet|epoch1|Heodo","euphoria.no","209.59.202.31","29873","US"
"2020-08-13 01:09:08","http://gojackets.com/forum/Documentation/","offline","malware_download","doc|emotet|epoch2|heodo","gojackets.com","209.59.210.231","29873","US"
"2020-08-12 15:08:25","https://www.kriskate.com/upload/nfBPTDeVj/","offline","malware_download","doc|emotet|epoch3|Heodo","www.kriskate.com","66.96.147.102","29873","US"
"2020-08-12 01:37:34","http://posmicrosystems.com/OCT/05eo9y/yho7cb662821oxuq416ncv9m0g/","offline","malware_download","doc|emotet|epoch2|heodo","posmicrosystems.com","66.96.146.84","29873","US"
"2020-08-11 13:46:04","http://euphoria.no/mail.euphoria.no/swift/","offline","malware_download","doc|emotet|epoch2|heodo","euphoria.no","209.59.202.31","29873","US"
"2020-08-10 15:01:20","http://gojackets.com/forum/LLC/","offline","malware_download","doc|emotet|epoch2|heodo","gojackets.com","209.59.210.231","29873","US"
"2020-08-07 18:01:03","http://kriskate.com/upload/available-array/open-profile/s6g6p0hjyrg-2y6tu58ws2xs21/","offline","malware_download","doc|emotet|epoch1","kriskate.com","66.96.147.102","29873","US"
"2020-08-07 18:01:01","http://www.kriskate.com/upload/available-array/open-profile/s6g6p0hjyrg-2y6tu58ws2xs21/","offline","malware_download","doc|emotet|epoch1|Heodo|QuakBot","www.kriskate.com","66.96.147.102","29873","US"
"2020-08-07 15:33:06","http://chmiola.net/studio/personal_disk/open_profile/JJy1X0Wm_Jb2niv2L2qJqim/","offline","malware_download","doc|emotet|epoch1|heodo|QuakBot","chmiola.net","66.96.134.97","29873","US"
"2020-08-07 05:07:05","https://www.kriskate.com/upload/available-array/open-profile/s6g6p0hjyrg-2y6tu58ws2xs21/","offline","malware_download","doc|emotet|epoch1|heodo|QuakBot","www.kriskate.com","66.96.147.102","29873","US"
"2020-08-06 22:08:04","http://posmicrosystems.com/common_resource/3ZYNn88Sm_QdY9vaOqlXKYn_989270539154_n7FFnMeyjem/36660133916761_YjN3N510WqQNfYx0/","offline","malware_download","doc|emotet|epoch1|heodo","posmicrosystems.com","66.96.146.84","29873","US"
"2020-07-31 14:51:04","http://posmicrosystems.com/balance/t8dpeb54nchg/e474868660412vht8ymb7vn10qkc6j/","offline","malware_download","doc|emotet|epoch2|heodo","posmicrosystems.com","66.96.146.84","29873","US"
"2020-07-31 09:50:05","http://genek.com/ar/Document/9mbrb4/","offline","malware_download","doc|emotet|epoch2|heodo","genek.com","66.96.146.129","29873","US"
"2020-07-30 13:54:06","https://www.kriskate.com/upload/private_array/interior_cloud/43197515760197_AFdBR5sJxTTXa/","offline","malware_download","doc|emotet|epoch1|Heodo","www.kriskate.com","66.96.147.102","29873","US"
"2020-07-28 16:57:05","http://genek.com/ar/eTrac/v22d34aoxw/9h54w3934398511879wpgm89ysysitiljbb/","offline","malware_download","doc|emotet|epoch2|Heodo","genek.com","66.96.146.129","29873","US"
"2020-07-27 17:36:20","http://chmiola.net/studio/flsHUm/","offline","malware_download","doc|emotet|epoch3|Heodo","chmiola.net","66.96.134.97","29873","US"
"2020-07-09 11:47:10","http://bazzardeals.com/cyon/g6U2rSph70sSCrs.exe","offline","malware_download","exe|MassLogger","bazzardeals.com","66.96.162.128","29873","US"
"2020-07-09 07:38:29","http://bazzardeals.com/cyon/sZ5JiFfRsBQ6Tku.exe","offline","malware_download","exe|MassLogger","bazzardeals.com","66.96.162.128","29873","US"
"2020-07-09 07:38:18","http://bazzardeals.com/cyon/qgfFJHT7RBrf4ei.exe","offline","malware_download","exe|MassLogger","bazzardeals.com","66.96.162.128","29873","US"
"2020-07-09 07:38:11","http://bazzardeals.com/cyon/pZpQbRFlnxsu7VK.exe","offline","malware_download","exe|MassLogger","bazzardeals.com","66.96.162.128","29873","US"
"2020-07-09 07:38:00","http://bazzardeals.com/cyon/o77N3HiVFugsO9q.exe","offline","malware_download","exe|MassLogger","bazzardeals.com","66.96.162.128","29873","US"
"2020-07-09 07:37:53","http://bazzardeals.com/cyon/m1pZYGiBFonndjG.exe","offline","malware_download","exe|MassLogger","bazzardeals.com","66.96.162.128","29873","US"
"2020-07-09 07:37:40","http://bazzardeals.com/cyon/jIKCcfIsjpcUSjM.exe","offline","malware_download","exe|MassLogger","bazzardeals.com","66.96.162.128","29873","US"
"2020-07-09 07:37:24","http://bazzardeals.com/cyon/aBifs1DN0rr8X1q.exe","offline","malware_download","exe|MassLogger","bazzardeals.com","66.96.162.128","29873","US"
"2020-07-09 07:37:15","http://bazzardeals.com/cyon/ZWiW2Y27HUjCG5Y.exe","offline","malware_download","exe|MassLogger","bazzardeals.com","66.96.162.128","29873","US"
"2020-07-09 07:36:48","http://bazzardeals.com/cyon/YvHF6Lp7RzXCeb2.exe","offline","malware_download","exe|MassLogger","bazzardeals.com","66.96.162.128","29873","US"
"2020-07-09 07:36:40","http://bazzardeals.com/cyon/PpmL6iWndhgWrcD.exe","offline","malware_download","exe|MassLogger","bazzardeals.com","66.96.162.128","29873","US"
"2020-07-09 07:36:31","http://bazzardeals.com/cyon/MkXhxWHcc49zLgc.exe","offline","malware_download","exe|MassLogger","bazzardeals.com","66.96.162.128","29873","US"
"2020-07-09 07:36:20","http://bazzardeals.com/cyon/F2EzKUpFLjTmAQl.exe","offline","malware_download","exe|MassLogger","bazzardeals.com","66.96.162.128","29873","US"
"2020-07-09 07:36:09","http://bazzardeals.com/cyon/DcBAMuENpLqiAz9.exe","offline","malware_download","exe|MassLogger","bazzardeals.com","66.96.162.128","29873","US"
"2020-07-09 07:36:01","http://bazzardeals.com/cyon/Di4SV7duDiFe4yr.exe","offline","malware_download","exe|MassLogger","bazzardeals.com","66.96.162.128","29873","US"
"2020-07-09 07:35:47","http://bazzardeals.com/cyon/DKtvUQWTWBBEYlm.exe","offline","malware_download","exe|MassLogger","bazzardeals.com","66.96.162.128","29873","US"
"2020-07-09 07:35:31","http://bazzardeals.com/cyon/6fEDPaC5pBfRZVL.exe","offline","malware_download","exe|MassLogger","bazzardeals.com","66.96.162.128","29873","US"
"2020-07-09 07:35:22","http://bazzardeals.com/cyon/0QSzXhS7MbCQTXC.exe","offline","malware_download","exe|MassLogger","bazzardeals.com","66.96.162.128","29873","US"
"2020-07-09 07:35:12","http://bazzardeals.com/cyon/a4ebNcJDqnA1QbZ.exe","offline","malware_download","exe|MassLogger","bazzardeals.com","66.96.162.128","29873","US"
"2020-06-09 08:11:07","http://gardeniabakery.com/nxhdsqqbibe/kT/Jr/MWIrkwbj.zip","offline","malware_download","Qakbot|Quakbot|zip","gardeniabakery.com","207.148.248.143","29873","US"
"2020-06-09 08:09:48","http://institutosantarosa.org/ieccvj/FgZ5OYsmf9.zip","offline","malware_download","Qakbot|Quakbot|zip","institutosantarosa.org","66.96.147.105","29873","US"
"2020-06-09 08:07:26","http://institutosantarosa.org/ieccvj/wQk9ZwelxD.zip","offline","malware_download","Qakbot|Quakbot|zip","institutosantarosa.org","66.96.147.105","29873","US"
"2020-06-09 08:06:48","http://institutosantarosa.org/ieccvj/jG/l1/PNQ6brGv.zip","offline","malware_download","Qakbot|Quakbot|zip","institutosantarosa.org","66.96.147.105","29873","US"
"2020-06-09 08:03:36","http://gardeniabakery.com/nxhdsqqbibe/K3qcW8D1cc.zip","offline","malware_download","Qakbot|Quakbot|zip","gardeniabakery.com","207.148.248.143","29873","US"
"2020-06-09 07:55:11","http://institutosantarosa.org/lszshrfqxo/Z/ew4ifrvys.zip","offline","malware_download","Qakbot|Quakbot|zip","institutosantarosa.org","66.96.147.105","29873","US"
"2020-06-09 07:53:28","http://institutosantarosa.org/ieccvj/A9/Wr/40hUaxD2.zip","offline","malware_download","Qakbot|Quakbot|zip","institutosantarosa.org","66.96.147.105","29873","US"
"2020-06-08 19:04:07","http://gardeniabakery.com/mmtmghrqlu/e/yuVaROn6H.zip","offline","malware_download","Qakbot|Quakbot|zip","gardeniabakery.com","207.148.248.143","29873","US"
"2020-06-08 18:58:32","http://gardeniabakery.com/mmtmghrqlu/kCUnhmCTUG.zip","offline","malware_download","Qakbot|Quakbot|zip","gardeniabakery.com","207.148.248.143","29873","US"
"2020-06-08 18:04:50","http://institutosantarosa.org/lszshrfqxo/55/18/SYueeBFD.zip","offline","malware_download","Qakbot|Quakbot|zip","institutosantarosa.org","66.96.147.105","29873","US"
"2020-06-08 17:44:43","http://gardeniabakery.com/nxhdsqqbibe/Wp3Dy0tFj0.zip","offline","malware_download","Qakbot|Quakbot|zip","gardeniabakery.com","207.148.248.143","29873","US"
"2020-06-08 17:08:08","http://institutosantarosa.org/lszshrfqxo/rY/oq/uW0qORHm.zip","offline","malware_download","Qakbot|Quakbot|zip","institutosantarosa.org","66.96.147.105","29873","US"
"2020-06-08 17:08:02","http://gardeniabakery.com/mmtmghrqlu/X/n7jYmBwb2.zip","offline","malware_download","Qakbot|Quakbot|zip","gardeniabakery.com","207.148.248.143","29873","US"
"2020-06-08 17:04:24","http://institutosantarosa.org/ieccvj/3QvofqhROr.zip","offline","malware_download","Qakbot|Quakbot|zip","institutosantarosa.org","66.96.147.105","29873","US"
"2020-06-08 17:02:07","http://institutosantarosa.org/ieccvj/WX/Qu/VMQZdVgT.zip","offline","malware_download","Qakbot|Quakbot|zip","institutosantarosa.org","66.96.147.105","29873","US"
"2020-06-08 16:39:47","http://institutosantarosa.org/ieccvj/X4iwFUDtPb.zip","offline","malware_download","Qakbot|Quakbot|zip","institutosantarosa.org","66.96.147.105","29873","US"
"2020-06-08 16:37:43","http://gardeniabakery.com/mmtmghrqlu/lffVAwRU4D.zip","offline","malware_download","Qakbot|Quakbot|zip","gardeniabakery.com","207.148.248.143","29873","US"
"2020-06-08 15:55:31","http://gardeniabakery.com/nxhdsqqbibe/qqHXJhi0Sx.zip","offline","malware_download","Qakbot|Quakbot|zip","gardeniabakery.com","207.148.248.143","29873","US"
"2020-06-08 15:46:27","http://gardeniabakery.com/nxhdsqqbibe/WO4tR4dhcy.zip","offline","malware_download","Qakbot|Quakbot|zip","gardeniabakery.com","207.148.248.143","29873","US"
"2020-06-08 15:44:16","http://institutosantarosa.org/ieccvj/g/G9BOKAi75.zip","offline","malware_download","Qakbot|Quakbot|zip","institutosantarosa.org","66.96.147.105","29873","US"
"2020-06-08 15:28:27","http://institutosantarosa.org/ieccvj/Kf/Pt/G3E8W3b7.zip","offline","malware_download","Qakbot|Quakbot|zip","institutosantarosa.org","66.96.147.105","29873","US"
"2020-06-02 08:15:19","http://gardeniabakery.com/lxsiavzpixdg/3435/NQAD_3435_01062020.zip","offline","malware_download","Qakbot|Quakbot|zip","gardeniabakery.com","207.148.248.143","29873","US"
"2020-06-02 07:38:19","http://gardeniabakery.com/lxsiavzpixdg/NQAD_53936_01062020.zip","offline","malware_download","Qakbot|Quakbot|zip","gardeniabakery.com","207.148.248.143","29873","US"
"2020-06-02 07:37:44","http://gardeniabakery.com/lxsiavzpixdg/3015976/NQAD_3015976_01062020.zip","offline","malware_download","Qakbot|Quakbot|zip","gardeniabakery.com","207.148.248.143","29873","US"
"2020-06-02 07:32:20","http://gardeniabakery.com/lxsiavzpixdg/NQAD_43076_01062020.zip","offline","malware_download","Qakbot|Quakbot|zip","gardeniabakery.com","207.148.248.143","29873","US"
"2020-06-02 06:39:33","http://gardeniabakery.com/lxsiavzpixdg/NQAD_9843044_01062020.zip","offline","malware_download","Qakbot|Quakbot|zip","gardeniabakery.com","207.148.248.143","29873","US"
"2020-06-01 19:36:22","http://collegethinking.com/ssbksupfv/3532/NBAR_3532_29052020.zip","offline","malware_download","Qakbot|Quakbot|zip","collegethinking.com","207.148.248.143","29873","US"
"2020-06-01 19:33:46","http://collegethinking.com/ssbksupfv/5390/NBAR_5390_29052020.zip","offline","malware_download","Qakbot|Quakbot|zip","collegethinking.com","207.148.248.143","29873","US"
"2020-06-01 14:18:05","http://outsideragency.com/dir/qlamiwuapz/9188/NBAR_9188_29052020.zip","offline","malware_download","Qakbot|qbot|spx130|zip","outsideragency.com","207.148.248.143","29873","US"
"2020-06-01 13:17:20","http://outsideragency.com/dir/qlamiwuapz/0113/NBAR_0113_29052020.zip","offline","malware_download","Qakbot|Quakbot|zip","outsideragency.com","207.148.248.143","29873","US"
"2020-06-01 07:04:07","https://invigoratenow.com/wp-content/uploads/2014/07/Bonusebooks.zip","offline","malware_download","Qakbot|Quakbot|zip","invigoratenow.com","207.148.248.143","29873","US"
"2020-05-04 21:27:10","http://SnackFreebie.com/oejellniu/ServiceContractAgreement_77244_05012020.zip","offline","malware_download","ESP|geofenced|Qakbot|Quakbot|zip","SnackFreebie.com","207.148.248.143","29873","US"
"2020-05-04 17:34:40","http://SnackFreebie.com/oejellniu/865776096/ServiceContractAgreement_865776096_05012020.zip","offline","malware_download","ESP|geofenced|Qakbot|Quakbot|zip","SnackFreebie.com","207.148.248.143","29873","US"
"2020-04-09 16:55:07","https://greentec-automation.com/wp-cran.php","offline","malware_download","exe","greentec-automation.com","66.96.147.112","29873","US"
"2020-01-30 19:23:33","http://am-concepts.ca/edithluc/protected-zone/external-space/4665288-uf8wD8MvF/","offline","malware_download","doc|emotet|epoch1|Heodo","am-concepts.ca","66.96.149.2","29873","US"
"2020-01-28 14:41:34","http://am-concepts.ca/edithluc/2W3gtl-dFAf46xsiEdd-array/12T2e3C-KjUWhthF1BgUq-forum/5y0alolcp82de-0yxz/","offline","malware_download","doc|emotet|epoch1|Heodo","am-concepts.ca","66.96.149.2","29873","US"
"2020-01-28 11:25:12","http://helptoload.com/wp-admin/esp/fjm1pf0/","offline","malware_download","doc|emotet|epoch2|heodo","helptoload.com","66.96.147.159","29873","US"
"2020-01-27 12:03:32","http://testjbarron.ipage.com/swanslime/KeFQ425559/","offline","malware_download","emotet|epoch1|exe|Heodo","testjbarron.ipage.com","66.96.147.96","29873","US"
"2020-01-24 13:34:06","http://testjbarron.ipage.com/swanslime/paclm/","offline","malware_download","doc|emotet|epoch2|heodo","testjbarron.ipage.com","66.96.147.96","29873","US"
"2020-01-24 06:03:08","http://am-concepts.ca/edithluc/FgqSpZF/","offline","malware_download","doc|emotet|epoch3|heodo","am-concepts.ca","66.96.149.2","29873","US"
"2020-01-22 00:29:20","http://am-concepts.ca/edithluc/4c_oodkg_resource/open_cloud/90765357739_ySVzck60aGDb/","offline","malware_download","doc|emotet|epoch1|Heodo","am-concepts.ca","66.96.149.2","29873","US"
"2020-01-17 01:23:08","http://am-concepts.ca/edithluc/wR/","offline","malware_download","doc|emotet|epoch3|heodo","am-concepts.ca","66.96.149.2","29873","US"
"2020-01-13 18:27:16","https://expresodeportivo.com/backup/4xg5799m-vi0rzbhvb9-96/","offline","malware_download","emotet|epoch3|exe|Heodo","expresodeportivo.com","66.96.147.110","29873","US"
"2019-12-19 05:08:03","http://www.fernandogarciamusic.com/wp-includes/invoice/3ml6nnhix/","offline","malware_download","doc|emotet|epoch2|heodo","www.fernandogarciamusic.com","66.96.149.1","29873","US"
"2019-12-14 07:14:04","http://milestoneseries.com/wp-includes/sucggy3-v8-9847/","offline","malware_download","doc|emotet|epoch3|heodo","milestoneseries.com","66.96.134.202","29873","US"
"2019-12-12 22:40:06","http://greaterexcellence.com/disciplebox/OCT/","offline","malware_download","doc|emotet|epoch2|heodo","greaterexcellence.com","207.148.248.143","29873","US"
"2019-12-12 08:54:08","http://diamondsareforeverband.com/wp-content/themes/themeforest-19078867-lucille-music-wordpress-theme_all/lucille/customizer/css/payments/2c.jpg","offline","malware_download","exe|GandCrab","diamondsareforeverband.com","66.96.147.106","29873","US"
"2019-12-11 10:43:03","http://ogaindustry.com/cgi-bin/attachments/i5bahy0kxx75/","offline","malware_download","doc|emotet|epoch2|Heodo","ogaindustry.com","66.96.147.109","29873","US"
"2019-12-10 18:00:33","http://jehovahschristianwitnesseshelphotline.com/wp-admin/private-box/security-space/yml7b2vu1-6ux09v06yy83/","offline","malware_download","doc|emotet|epoch1","jehovahschristianwitnesseshelphotline.com","66.96.160.206","29873","US"
"2019-12-02 13:34:09","http://blog.241optical.com/wp-admin/9LyJfHHkgZ/","offline","malware_download","emotet|epoch2|exe|Heodo","blog.241optical.com","66.96.131.149","29873","US"
"2019-11-25 22:40:15","https://boxyfy.com/wordpress/05z545/","offline","malware_download","emotet|epoch1|exe|Heodo","boxyfy.com","66.96.147.111","29873","US"
"2019-11-19 07:34:02","http://elytspaincom.ipage.com/cgi-bin/tkev18737/","offline","malware_download","emotet|epoch1|exe|Heodo","elytspaincom.ipage.com","66.96.147.96","29873","US"
"2019-11-15 20:42:09","http://komiolaf.com/wp-content/pjk0l43/","offline","malware_download","emotet|epoch1|exe|Heodo","komiolaf.com","66.96.160.156","29873","US"
"2019-10-22 00:02:15","https://endresactuarial.com/uploads/3/4/5/2/34528131/setup_eac_pv.exe","offline","malware_download","exe","endresactuarial.com","66.96.147.112","29873","US"
"2019-10-10 12:30:22","http://www.ethiofidel.com/cgi-bin/htt6ft2j_eh9u68dup-79/","offline","malware_download","emotet|epoch2|exe|Heodo","www.ethiofidel.com","66.96.147.109","29873","US"
"2019-10-07 12:19:48","http://umbastudiocom.ipage.com/wp-content/zzl31/","offline","malware_download","Emotet|epoch1|exe|Heodo","umbastudiocom.ipage.com","66.96.147.96","29873","US"
"2019-10-04 17:18:07","http://umbastudiocom.ipage.com/wp-content/kMCtdfR/","offline","malware_download","emotet|epoch3|exe|Heodo","umbastudiocom.ipage.com","66.96.147.96","29873","US"
"2019-10-01 07:52:08","http://sysmobi.com/wp-admin/k7epo312/","offline","malware_download","emotet|epoch1|exe|heodo","sysmobi.com","66.96.132.103","29873","US"
"2019-09-20 12:16:53","http://mimirs.com/wp-content/themes/Divi/et-pagebuilder/doc/2c.jpg","offline","malware_download","ransomware|shade|Troldesh","mimirs.com","66.96.149.32","29873","US"
"2019-07-23 11:49:04","http://enc-tech.com/Panel/Builder.exe","offline","malware_download","exe","enc-tech.com","209.59.212.81","29873","US"
"2019-07-23 03:39:02","http://www.enc-tech.com/Panel/GrabTest.exe","offline","malware_download","exe|JackPOS","www.enc-tech.com","209.59.212.81","29873","US"
"2019-07-23 03:38:10","http://www.enc-tech.com/Panel/jack.zip","offline","malware_download","JackPOS|zip","www.enc-tech.com","209.59.212.81","29873","US"
"2019-07-23 03:37:12","http://www.enc-tech.com/Panel/stub.vir","offline","malware_download","JackPOS|ZeuS","www.enc-tech.com","209.59.212.81","29873","US"
"2019-07-23 03:37:11","http://www.enc-tech.com/Panel/Builder.exe","offline","malware_download","exe|JackPOS","www.enc-tech.com","209.59.212.81","29873","US"
"2019-05-27 13:32:09","http://erholidays.com/wp-content/themes/tafri-travel/webfonts/1c.jpg","offline","malware_download","exe|Troldesh","erholidays.com","207.148.248.143","29873","US"
"2019-05-06 16:15:03","http://agfip.com/wp-content/sec.EN.myaccount.doc.sec/","offline","malware_download","doc|emotet|epoch1|Heodo","agfip.com","207.148.248.143","29873","US"
"2019-04-25 19:32:07","http://wordcooper.com/wp-includes/Scan/p4oJcoyx/","offline","malware_download","Emotet|Heodo","wordcooper.com","66.96.161.151","29873","US"
"2019-03-22 05:02:43","http://rrbmexico.com/license.exe","offline","malware_download","exe","rrbmexico.com","66.96.147.109","29873","US"
"2019-03-15 17:03:02","http://imbt.info/css/fdrl-fv9wb-hvazs/","offline","malware_download","Emotet|Heodo","imbt.info","66.96.162.139","29873","US"
"2019-03-06 15:23:14","http://www.ambiguousmedia.net/wp-content/themes/suffusion/now-reading/msg.jpg","offline","malware_download","exe|Troldesh","www.ambiguousmedia.net","66.96.149.32","29873","US"
"2019-03-06 10:52:00","http://ambiguousmedia.net/wp-content/themes/suffusion/now-reading/msg.jpg","offline","malware_download","exe|Troldesh","ambiguousmedia.net","66.96.149.32","29873","US"
"2019-02-26 09:31:14","http://heritageislands.com/wp-content/themes/twentynineteen/classes/pik.zip","offline","malware_download","RUS|Troldesh|zipped-JS","heritageislands.com","65.254.231.110","29873","US"
"2019-02-23 10:48:11","http://zeilnhofer.com/templates/ja_purity/css/msg.jpg","offline","malware_download","exe|payload|ransomware|shade|stage2|TrolDesh","zeilnhofer.com","66.96.149.2","29873","US"
"2019-02-05 20:10:03","http://azmeasurement.com/SWIFT-COPY-MT103-PAYMENT.ACE","offline","malware_download","Formbook|zip","azmeasurement.com","66.96.149.17","29873","US"
"2019-02-01 12:55:56","http://www.theboltchick.com/wp-content/themes/online-marketer/bonus/messg.jpg","offline","malware_download","exe|shade|Troldesh","www.theboltchick.com","65.254.227.240","29873","US"
"2019-01-31 15:10:05","http://rescue8.org/images/JoeArroyo/Noticiass.exe","offline","malware_download","exe","rescue8.org","66.96.149.2","29873","US"
"2019-01-23 02:44:11","http://ereservices.com/.well-known/pki-validation/sserv.jpg","offline","malware_download","exe|Ransomware.Troldesh|Troldesh","ereservices.com","66.96.162.135","29873","US"
"2019-01-19 06:02:10","http://toddlerpops.com/DE_de/NMEZPI6268550/Rechnungskorrektur/RECH/","offline","malware_download","doc|emotet|epoch2|Heodo","toddlerpops.com","207.148.248.143","29873","US"
"2019-01-18 17:37:18","http://www.toddlerpops.com/DE_de/NMEZPI6268550/Rechnungskorrektur/RECH/","offline","malware_download","emotet|epoch2|Heodo","www.toddlerpops.com","207.148.248.143","29873","US"
"2019-01-14 20:47:05","http://toddlerpops.com/Transactions/01_19","offline","malware_download","doc","toddlerpops.com","207.148.248.143","29873","US"
"2019-01-14 20:43:09","http://toddlerpops.com/Transactions/01_19/","offline","malware_download","emotet|epoch1|Heodo","toddlerpops.com","207.148.248.143","29873","US"
"2019-01-14 19:12:03","http://www.toddlerpops.com/Transactions/01_19/","offline","malware_download","doc|Emotet|Heodo","www.toddlerpops.com","207.148.248.143","29873","US"
"2019-01-14 18:59:02","http://www.toddlerpops.com/Transactions/01_19","offline","malware_download","doc","www.toddlerpops.com","207.148.248.143","29873","US"
"2018-12-14 14:41:05","http://eventosolution.com/Dezember2018/PORLYZT7642128/DE/DETAILS/","offline","malware_download","emotet|epoch2|Heodo","eventosolution.com","66.96.162.149","29873","US"
"2018-12-14 01:43:08","http://kalango.net/En_us/Payments/2018-12/","offline","malware_download","doc|emotet|epoch1|Heodo","kalango.net","66.96.162.143","29873","US"
"2018-12-13 12:16:06","http://wedjoyet.com/INV/687379885658FORPO/67247958864/Download/En/Open-Past-Due-Orders/","offline","malware_download","emotet|epoch2","wedjoyet.com","66.96.131.33","29873","US"
"2018-12-12 15:37:55","http://skaterace.com/Ref/01872441027193252074Dec2018/US/Outstanding-Invoices/","offline","malware_download","emotet|epoch2|Heodo","skaterace.com","66.96.145.106","29873","US"
"2018-12-11 02:56:52","http://skaterace.com/INVOICE/default/US_us/Open-Past-Due-Orders/","offline","malware_download","doc|emotet|epoch2|Heodo","skaterace.com","66.96.145.106","29873","US"
"2018-12-10 17:34:41","http://skaterace.com/INVOICE/default/US_us/Open-Past-Due-Orders","offline","malware_download","emotet|epoch2","skaterace.com","66.96.145.106","29873","US"
"2018-12-06 14:30:03","http://lambertons.com/En_us/Details/2018-12/","offline","malware_download","doc|Emotet|Heodo","lambertons.com","207.148.248.143","29873","US"
"2018-12-06 13:40:11","http://lambertons.com/En_us/Details/2018-12","offline","malware_download","emotet|epoch1|Heodo","lambertons.com","207.148.248.143","29873","US"
"2018-11-23 06:44:04","http://onecrmpro.com/h/cv.msi","offline","malware_download","exe-to-msi","onecrmpro.com","65.254.227.240","29873","US"
"2018-11-16 02:06:37","http://eccdetailing.com/tyoinvur/6557032QNJ/8CY/com/Personal/","offline","malware_download","doc|emotet|epoch2","eccdetailing.com","207.148.248.143","29873","US"
"2018-11-15 20:51:15","http://eccdetailing.com/tyoinvur/6557032QNJ/8CY/com/Personal","offline","malware_download","emotet|epoch2|Heodo","eccdetailing.com","207.148.248.143","29873","US"
"2018-11-13 22:35:34","http://eccdetailing.com/tyoinvur/6557032QNJ/PAY/Personal/","offline","malware_download","doc|emotet|epoch2|Heodo","eccdetailing.com","207.148.248.143","29873","US"
"2018-11-13 19:32:13","http://eccdetailing.com/tyoinvur/6557032QNJ/PAY/Personal","offline","malware_download","emotet|Heodo","eccdetailing.com","207.148.248.143","29873","US"
"2018-11-07 06:20:10","http://www.bellebeautyclinic.com/wp-admin/css/colors/coffee/xBlack_Configs/cool.exe","offline","malware_download","AgentTesla|exe","www.bellebeautyclinic.com","66.96.162.150","29873","US"
"2018-10-15 08:14:05","https://electricalpm.com/area-riservata/LFY-5850168G2F-documento-cliente","offline","malware_download","geofenced|ITA|sLoad|zipped-lnk","electricalpm.com","66.96.162.249","29873","US"
"2018-10-01 15:38:05","https://retroframing.com/.customer-area/package-5IO263-updated","offline","malware_download","lnk|sload|zip","retroframing.com","207.148.248.143","29873","US"
"2018-09-28 10:03:27","https://retroframing.com/.customer-area/package-61G-0842-updated","offline","malware_download","lnk|sload|zip","retroframing.com","207.148.248.143","29873","US"
"2018-09-28 10:03:26","https://retroframing.com/.customer-area/pack-056083920-updated","offline","malware_download","lnk|sload|zip","retroframing.com","207.148.248.143","29873","US"
"2018-09-28 10:03:25","https://retroframing.com/.customer-area/46YQ2335-package-status","offline","malware_download","lnk|sload|zip","retroframing.com","207.148.248.143","29873","US"
"2018-09-28 10:03:25","https://retroframing.com/.customer-area/95SV2046-package-status","offline","malware_download","lnk|sload|zip","retroframing.com","207.148.248.143","29873","US"
"2018-09-27 14:23:28","https://retroframing.com/.customer-area/pack-4RLJ0016-updated","offline","malware_download","lnk|sload|zip","retroframing.com","207.148.248.143","29873","US"
"2018-09-11 04:59:44","http://angeltransitionservices.com/657452XQ/BIZ/Business/","offline","malware_download","doc|emotet|epoch2","angeltransitionservices.com","66.96.149.30","29873","US"
"2018-09-10 07:51:17","http://angeltransitionservices.com/657452XQ/BIZ/Business","offline","malware_download","doc|emotet|Heodo","angeltransitionservices.com","66.96.149.30","29873","US"
"2018-09-07 02:58:00","http://inrpo.com/Document/US_us/Invoice-receipt/","offline","malware_download","doc|emotet|epoch2","inrpo.com","66.96.162.150","29873","US"
"2018-09-05 06:27:16","http://inrpo.com/Document/US_us/Invoice-receipt","offline","malware_download","doc|emotet|Heodo","inrpo.com","66.96.162.150","29873","US"
"2018-09-04 10:36:10","http://thexda.com/ZptEBCytV","offline","malware_download","emotet|exe|heodo","thexda.com","207.148.248.143","29873","US"
"2018-08-31 05:17:40","http://thexda.com/5LA/SWIFT/Personal/","offline","malware_download","doc|emotet|epoch2|Heodo","thexda.com","207.148.248.143","29873","US"
"2018-08-30 23:43:25","http://thexda.com/5LA/SWIFT/Personal","offline","malware_download","doc|emotet|Heodo","thexda.com","207.148.248.143","29873","US"
"2018-08-28 11:25:11","https://inventeksys.com/odjbas.dlknxaaa","offline","malware_download","exe|TrickBot","inventeksys.com","66.96.147.96","29873","US"
"2018-08-28 10:47:19","http://inventeksys.com/odjbas.dlknxaaa","offline","malware_download","exe|trickbot","inventeksys.com","66.96.147.96","29873","US"
"2018-08-28 08:30:26","http://www.streetconversation.com/Nummer-9953647709.zip","offline","malware_download","DEU|Nymaim","www.streetconversation.com","207.148.248.143","29873","US"
"2018-08-09 19:01:18","http://alphadigitizing.com/8OOHCARD/QEV95677364286RLUPU/Aug-09-2018-30474650/BD-DYF-Aug-09-2018","offline","malware_download","doc|emotet|Heodo","alphadigitizing.com","207.148.248.143","29873","US"
"2018-07-30 19:12:40","http://isamaine.com/DHL/En_us/","offline","malware_download","doc|emotet|epoch2|Heodo","isamaine.com","66.96.160.142","29873","US"
"2018-07-28 17:24:08","https://db.catalinaappraisalservice.com/usernotice/1RJ6972-notifications","offline","malware_download","lnk|sload|zip","db.catalinaappraisalservice.com","66.96.163.130","29873","US"
"2018-07-28 17:24:08","https://db.catalinaappraisalservice.com/usernotice/69V1K3619-notifications","offline","malware_download","lnk|sload|zip","db.catalinaappraisalservice.com","66.96.163.130","29873","US"
"2018-07-27 04:06:52","http://isamaine.com/Jul2018/US_us/Available-invoices/Pay-Invoice/","offline","malware_download","doc|emotet|epoch2|Heodo","isamaine.com","66.96.160.142","29873","US"
"2018-07-17 23:07:52","http://shoppnonclin.com/doc/US_us/Purchase/HRI-Monthly-Invoice/","offline","malware_download","doc|emotet|epoch2|Heodo","shoppnonclin.com","66.96.162.144","29873","US"
"2018-07-17 14:36:13","http://shoppnonclin.com/newsletter/En_us/ACCOUNT/Invoice-1369027/","offline","malware_download","Emotet|Heodo","shoppnonclin.com","66.96.162.144","29873","US"
"2018-07-17 11:52:19","http://shoppnonclin.com/newsletter/En_us/ACCOUNT/Invoice-1369027","offline","malware_download","doc|emotet|Heodo","shoppnonclin.com","66.96.162.144","29873","US"
"2018-07-16 21:33:17","http://blog.expensesharing.com/wp-content/pdf/En/New-Order-Upcoming/Past-Due-invoice/","offline","malware_download","doc|emotet|epoch2|Heodo","blog.expensesharing.com","207.148.248.143","29873","US"
"2018-07-12 13:09:26","http://www.autoescuelasancarlos.com/Jul2018/En_us/STATUS/Invoice-727680/","offline","malware_download","doc|emotet|heodo","www.autoescuelasancarlos.com","66.96.147.160","29873","US"
"2018-07-10 09:35:08","http://www.autoescuelasancarlos.com/doc/EN_en/Client/Invoice/","offline","malware_download","doc|emotet|Heodo","www.autoescuelasancarlos.com","66.96.147.160","29873","US"
"2018-07-03 11:56:03","http://cabinetrollouts.com/qWp1mtn/","offline","malware_download","emotet|exe|heodo","cabinetrollouts.com","207.148.248.143","29873","US"
"2018-07-03 05:45:42","http://www.customaccessdatabase.com/En/Purchase/HRI-Monthly-Invoice/","offline","malware_download","emotet|heodo","www.customaccessdatabase.com","66.96.149.32","29873","US"
"2018-07-02 23:55:34","http://customaccessdatabase.com/En/Purchase/HRI-Monthly-Invoice/","offline","malware_download","doc|emotet|epoch2|Heodo","customaccessdatabase.com","66.96.149.32","29873","US"
"2018-07-01 22:18:35","http://www.changkim.com/Pasado-Due-Facturas/","offline","malware_download","doc|emotet|epoch1|Heodo","www.changkim.com","66.96.149.2","29873","US"
"2018-06-29 23:28:10","http://cabinetrollouts.com/OVERDUE-ACCOUNT/Order-30060856291/","offline","malware_download","doc|emotet|epoch2|Heodo","cabinetrollouts.com","207.148.248.143","29873","US"
"2018-06-26 15:48:04","http://www.customaccessdatabase.com/joiuehtr/9g94p2/","offline","malware_download","emotet|epoch1|Heodo|payload","www.customaccessdatabase.com","66.96.149.32","29873","US"
"2018-06-26 15:44:07","http://customaccessdatabase.com/joiuehtr/9g94p2/","offline","malware_download","Heodo","customaccessdatabase.com","66.96.149.32","29873","US"
"2018-06-26 09:44:04","http://www.defender-services.com/OVERDUE-ACCOUNT/Please-pull-invoice-182744/","offline","malware_download","doc|emotet|heodo","www.defender-services.com","66.96.149.19","29873","US"
"2018-06-18 23:52:09","http://www.ecosex.net/Purchase/Pay-Invoice/","offline","malware_download","AgentTesla|doc|emotet|epoch2|Heodo","www.ecosex.net","65.254.227.224","29873","US"
"2018-06-15 17:21:17","http://arabiantongue.net/IRS-Letters-075H/61/","offline","malware_download","Emotet|Heodo","arabiantongue.net","66.96.147.111","29873","US"
"2018-06-15 15:51:12","http://www.arabiantongue.net/IRS-Letters-075H/61/","offline","malware_download","doc|emotet|epoch1|Heodo","www.arabiantongue.net","66.96.147.111","29873","US"
"2018-05-30 20:52:25","http://psd-ga.com/51655165g/ACCOUNT/Auditor-of-State-Notification-of-EFT-Deposit/","offline","malware_download","doc|emotet|Heodo","psd-ga.com","66.96.149.1","29873","US"
"2018-05-25 15:54:51","http://psd-ga.com/zapgovno/Nhfxs/","offline","malware_download","exe|Heodo","psd-ga.com","66.96.149.1","29873","US"
"2018-05-24 16:19:12","http://prproductions.com/7b9UkJ/","offline","malware_download","emotet|exe|Heodo","prproductions.com","207.148.248.143","29873","US"
"2018-05-24 05:07:19","http://isamaine.com/sZ3d/","offline","malware_download","Emotet|exe|Heodo","isamaine.com","66.96.160.142","29873","US"
"2018-05-21 14:59:46","http://lambertons.com/FILE/New-Invoice-ZK99463-GJ-56124/","offline","malware_download","doc|emotet|Heodo","lambertons.com","207.148.248.143","29873","US"
"2018-05-07 20:25:16","http://gorglione.com/P8BdnrcjyMs2g","offline","malware_download","doc|emotet","gorglione.com","66.96.147.117","29873","US"
"2018-04-24 04:43:17","http://elrag.com/Important-Please-Read/","offline","malware_download","doc|emotet","elrag.com","207.148.248.143","29873","US"
"2018-04-24 04:42:19","http://jamesflames.com/7GMD/","offline","malware_download","emotet|payload","jamesflames.com","66.96.145.187","29873","US"
# of entries: 279