# Recent malware URLs.
# based on NictaTech Anti-Virus Cloud Engine (http://www.nictasoft.com/products/antivirus-cloud-engine/).
#
# October 6, 2026, 03:30 (EET)

onishenko.tk
9251.casino
42.228.247.65:33795/i
115.51.139.132:50321/i
182.127.161.102:39974/bin.sh
111.14.169.186:63698/bin.sh
96.62.71.22:8888/newtonsoft.json.dll
91.92.34.63:8888/quickb.msi
182.113.38.83:38525/bin.sh
120.84.213.140:41114/i
115.58.129.168:39509/bin.sh
60.23.170.10:54006/bin.sh
182.127.161.102:39974/i
175.149.67.216:46495/i
111.14.169.186:63698/i
176.65.139.36/eclipse.sh
gitrm.cfd/apix.ps1
176.65.148.144/bins/hilix.arm4
27.37.103.77:36304/i
60.23.237.21:45576/i
116.207.221.240:59439/mozi.m
182.113.38.83:38525/i
42.237.253.5:45263/i
white-mode-a35b.modpages.workers.dev/download/corz-client.jar
176.65.139.36/eclipse.x86_64
github.com/hunterteamc2/huynhtoanupload/raw/refs/heads/main/mko1.exe
107.172.132.240/87sbhas6as.sh
176.65.148.144/hilix.sh
210.208.111.74:53410/bin.sh
91.92.242.236/files-129312398/files/file_6ca450ddf497eb0f.exe
144.126.148.64/f/b8eac6853dcc452bc021-implant-linux-amd64
raw.githubusercontent.com/ktn1703/vanish-tool-discord/refs/heads/main/obf-vanish.py
gitrm.cfd/assets/svchostk.exe
github.com/server123-lab/analyis-file-malware-threardfox/raw/refs/heads/main/download2.exe
180.190.238.89:57500/mozi.a
36.70.64.64:42007/mozi.m
github.com/niehgns/yo1/raw/refs/heads/main/frostclient-1.21.11.jar
cdn.discordapp.com/attachments/1515230295643787377/1556719164180275301/bundle_1.zip?ex=6ac52f33&is=6ac3ddb3&hm=742cc81770b60be7b3cf4ff56eacc9c19ef6cc1f3b47245f83ae161853cd6c74&
cdn.discordapp.com/attachments/1182947418598289418/1556723625334153236/bundle.zip?ex=6ac5335a&is=6ac3e1da&hm=99e0ea109bb220f9675d652ca1f0963fad943aafbfe2413ca8ba1113de6e56de&
123.8.51.124:39954/i