{
  "feed": "NCSA Thailand Public Domain Blocklist",
  "type": "domain",
  "publisher": "NCSA Thailand",
  "country": "TH",
  "license": "CC0-1.0",
  "contact": "saraban@ncsa.or.th",
  "homepage": "https://www.ncsa.or.th",
  "tlp": [
    "tlp:clear",
    "tlp:white"
  ],
  "description": "Public malicious/suspicious domain blocklist derived from TLP:CLEAR/WHITE MISP attributes (to_ids=true).",
  "source": {
    "system": "MISP",
    "base_url": "https://misp_opendata.ncsa.or.th",
    "method": "attributes/restSearch",
    "auth": "header: Authorization",
    "query": "types=domain,hostname; tags=tlp:clear OR tlp:white; to_ids=1; deleted=0; limit=10000"
  },
  "generated_at": "2026-08-01T18:15:02Z",
  "valid_for_days": 7,
  "total": 1538,
  "file": {
    "format": "text/plain",
    "sha256": "15a8dc79b1f663bb565220da6de6f429109e2bb7eb8e19298ce8428877a68556",
    "entries": 1538
  },
  "data": [
    "09008.b-cdn.net",
    "0bgro.purpxqha.ru",
    "0ffce-dstrbuted1oqinn.pay-bonus-hr-958.workers.dev",
    "14north108east.com.au",
    "189f31ed7d.ipv6.bypass.eu.org",
    "1cv2f3d5s6a9w.ddnsfree.com",
    "23020-5292.s2.webspace.re",
    "27653669-1368604.renderforestsites.com",
    "2fscrum.thiocraijio.com",
    "300163.cc",
    "302013-coinbase.com",
    "360photo.oss-cn-hongkong.aliyuncs.com",
    "3df-qatevvaydrcted.pay-bonus-hr-958.workers.dev",
    "69-16-157-245.lin.as62651.net",
    "77img9a99.audienceflake.com",
    "798.toptopkm88.com",
    "9010.360sdgg.com",
    "92c49223-b37f-4157-904d-daf4679f14d5.usrfiles.com",
    "aab.sportsontheweb.net",
    "accessor.fud2026.com",
    "account.idloginmail.ru",
    "account.loginemail.ru",
    "account.telegpam.ru",
    "accountverifys.online",
    "acd.1yxqwzx2.com",
    "ac.metyp9.com",
    "acqv.w8510.com",
    "actiothreaz.com",
    "activation.croocheagou.com",
    "admina.freeddns.org",
    "adminconfigurationxlsm.polytronicsgroups.com",
    "aewreiuicajo.w8510.com",
    "aff.bnaosf1he.shop",
    "afsaces.accesscam.org",
    "aidatiadeayisubat.xyz",
    "ajgroupuae.usersatisfactionlab.de",
    "ajsidjasidwxoxwkwjddududjf.blogspot.com",
    "albumilustrado.msk.ru",
    "alenbarber.com",
    "all.targetedtrafficcrew.com",
    "amsterdam-sheet-veteran-aka.trycloudflare.com",
    "ancisesic.accesscam.org",
    "andall.servicesql.info",
    "andrefelipedonascime1753562407700.0461178.meusitehostgator.com.br",
    "and.thewowpownow3.com",
    "angular90.takemallelectric.com",
    "anotherarmy.dns.army",
    "apdfhhjcxcb.w8510.com",
    "apex.herosms.ai",
    "api.bensaru.site",
    "api.cloudapi.stream",
    "api.fivefingerz.dev",
    "api.loadingdocuments.uk",
    "api.masscan.cloud",
    "api.mywalletsss.store",
    "api.s2cloud-amazon.com",
    "api.skycloudcenter.com",
    "api.soladify.fun",
    "api-sub.jrodacooker.dev",
    "api.toptechmanagementgroup.com",
    "apiv5.serverbks.xyz",
    "api.wiresguard.com",
    "aplusdesktop.workers.dev",
    "aplusmodgovua.workers.dev",
    "app.chatonline.us",
    "app-dimensiona.s3.sa-east-1.amazonaws.com",
    "applebox.camdvr.org",
    "appler.kozow.com",
    "app-luxtrust.com",
    "app.mediafire.com",
    "appoitment.dotoit.media",
    "aquaanalytics.uz",
    "arariacollege.co.in",
    "arbol.pt",
    "arcivevaxue34.b-cdn.net",
    "argentabeklantp.space",
    "arindam2802.github.io",
    "armylpus.workers.dev",
    "armyplus-desktop.workers.dev",
    "a.root-servers.net",
    "asdad21ww.freeddns.org",
    "asd.s7610rir.pw",
    "asdvxzzxvza.w8510.com",
    "asq.d6shiiwz.pw",
    "asq.r77vh0.pw",
    "asq.swhw71un.pw",
    "assessmentsonline.co.za",
    "assspratapgarh.org.in",
    "a.t.rizbegadget.shop",
    "attribute-homework-generator-lovers.trycloudflare.com",
    "aued.asytfsv.icu",
    "aued.bxahj.icu",
    "aued.czsfhjh.icu",
    "auedu.rfcxb.icu",
    "aued.zvvbgf.icu",
    "aurora.dawn-904.workers.dev",
    "auth-btconect98492345.drr.ac",
    "auth-c1ientdstrbutted.pay-bonus-hr.workers.dev",
    "auth-qatevvayc1ient.pay-employee-bonus-8ce.workers.dev",
    "auth.samecloud.o-r.kr",
    "auto.c3pool.org",
    "auto.skypool.xyz",
    "avworrkshop.com",
    "aw2o25forsbc.camdvr.org",
    "awbpxtpi.w8510.com",
    "awcc001jdaigfwdagdcew.giize.com",
    "awo-ika-67aa1db1a66e8.ycode.site",
    "azh.2023az.top",
    "az.vcnjh.icu",
    "bab2o25com.accesscam.org",
    "babaji.accesscam.org",
    "babi5599ss.ddnsgeek.com",
    "backlog.yiolono.com",
    "balabalabo.mywire.org",
    "barginshowless.garddenshcok.com",
    "basicsteeladelaide.com.au",
    "bbs.cwumlssuffdt.pw",
    "bb.vdfskis888.com",
    "bc.cnbjgds.icu",
    "bceee-snet.myvnc.com",
    "bear-ad.oss-us-west-1.aliyuncs.com",
    "benjamin-unnecessary-mothers-configured.trycloudflare.com",
    "beveiligsweb-l3u.duckdns.org",
    "bggs.giize.com",
    "bhenchood.ddns.net",
    "bhy.srl.mybluehost.me",
    "bibabo.freeddns.org",
    "binmol.webredirect.org",
    "bioth.giize.com",
    "bitjoker2024.000webhostapp.com",
    "bjj-files-production.s3.sa-east-1.amazonaws.com",
    "bjm9.blogspot.com",
    "blackhagga.duckdns.org",
    "bnpbaribassbe-e3987xcygt.live-website.com",
    "bobs8.oss-cn-hongkong.aliyuncs.com",
    "boemobww.ddnsfree.com",
    "booking.eu-g502817512-booking.homes",
    "booking.hotel-stay139028.com",
    "bot.atmsapp.cam",
    "bot-check-v1.b-cdn.net",
    "bot-check-v2.b-cdn.net",
    "brcallletme.theworkpc.com",
    "breedertremnd.com",
    "broad-choices-956576.framer.app",
    "brokenhillcottages.com.au",
    "brouweres.com",
    "browser.apl-org.online",
    "br.ruicaisiwang.com",
    "br.zmdesf.cn",
    "b.share-dns.net",
    "btbtutil.theworkpc.com",
    "btechxsolution.ubpages.com",
    "btinternet-10882.mmm.page",
    "btinternet-1088.mmm.page",
    "btinternet10.mmm.page",
    "bt-internet.daftpage.com",
    "btinternetweb10.mmm.page",
    "btltan.ooguy.com",
    "btonline.ycode.site",
    "bullol.duckdns.org",
    "business905.web-hosting.com",
    "buydildoonline.blogspot.com",
    "bvchxtckytsruydtuyfugf-yditusyajsgrxdsyrdtujydtujk.teemill.com",
    "bvz.sgesn.top",
    "bzbatflwb.w8510.com",
    "c3.wptask.cyou",
    "c4k-ircd.pwndns.pw",
    "c67f045c2f.ipv6.1433.eu.org",
    "c7sw6re576wbj3d7q2goke6ezk4gktg7a3o5we7zc6rl3u3ozida.ardrive.net",
    "caco.blueskyanalytics.net",
    "cajaapiura.pe",
    "cal.joycedoula.com.br",
    "cal.snehamumbai.org",
    "camcampkes.ddnsfree.com",
    "campanha1-api.ef971a42.workers.dev",
    "camsqewivo.kozow.com",
    "cansqra.w8510.com",
    "canwtrow.w8510.com",
    "cbox4.ignorelist.com",
    "ccammutom.ddnsgeek.com",
    "cccasdqawer.w8510.com",
    "ccccasdasdq.w8510.com",
    "cccvbsdfsdf.w8510.com",
    "ccduckdonald.duckdns.org",
    "ccmmkmnkna.w8510.com",
    "ccss.cxzve.icu",
    "cdn.caan.edu",
    "cdn.cloudapi.stream",
    "cdn.conditionfuneral.com",
    "cdn.glitch.global",
    "cdnvmtools.theworkpc.com",
    "centersoftwaresupports.azurewebsites.net",
    "cfx.kryptex.network",
    "chat.cloudapi.stream",
    "checkmail.kro.kr",
    "checkupdate.maskrisks.com",
    "chk.hturi.top",
    "circleci.friogoufo.com",
    "cjitdrpwnna.mswinsoftupdload.design",
    "cjp.onlinec.top",
    "classifieds.workers.dev",
    "claude.ai.download-app.us",
    "cleanupmac.mssg.me",
    "cloacpae.ddnsfree.com",
    "cloud.cflayerprotection.com",
    "cloudsynxcweb.pages.dev",
    "c.mid.al",
    "cmwwoods1.theworkpc.com",
    "cnrpaslceas.freeddns.org",
    "cocomo10.serveblog.net",
    "cocomo1.ddns.net",
    "cocomo2.ddns.net",
    "cocomo2.serveblog.net",
    "cocomo3.serveblog.net",
    "cocomo4.serveblog.net",
    "cocomo5.serveblog.net",
    "cocomo6.serveblog.net",
    "cocomo7.serveblog.net",
    "cocomo8.serveblog.net",
    "cocomo9.serveblog.net",
    "cocomo.ddns.net",
    "codemicros12.gleeze.com",
    "cod-identification-imported-carl.trycloudflare.com",
    "coh.cpayc.top",
    "coin-miner.cloudapi.stream",
    "commit.hanbiro.o-r.kr",
    "controller.rightwidth.dev",
    "cooltours.s3.sa-east-1.amazonaws.com",
    "cosmicroots.co.uk",
    "cp5ua.hyperhost.ua",
    "cpooooim.w8510.com",
    "crannoch.care",
    "crdp.org.in",
    "cressmiss.ooguy.com",
    "crm.cloudapi.stream",
    "cta.imasync.com",
    "cud-senegal.org",
    "cvabiasbae.ddnsfree.com",
    "c.vipersfutbol.com",
    "cvnoc01da1cjmnftsd.accesscam.org",
    "cvpc01aenusocirem.accesscam.org",
    "cvpc01cgsdfn53hgd.giize.com",
    "cvt.technicalprorj.xyz",
    "cwpayrollservices.co.uk",
    "cycbra.duckdns.org",
    "d.2fcc7078.digimg.store",
    "d65sb7ngveucv5k2nm508abdsjmbn7qmn.oast.pro",
    "dash.gztesttaac.com",
    "dash.nortonet.com",
    "dawn.apl-org.online",
    "dawnnews.workers.dev",
    "dclcwpdtsdcc.ddnsfree.com",
    "deb43e46-145f-4ebd-abfb-69a78b67bacf.usrfiles.com",
    "decent1.myvnc.com",
    "decent2.myvnc.com",
    "decent3.myvnc.com",
    "decent4.myvnc.com",
    "decent5.myvnc.com",
    "decent.myvnc.com",
    "decentralappps.com",
    "desafio.org",
    "desktopapluscom.workers.dev",
    "desktopaplus.workers.dev",
    "developerapi.com.br",
    "dev-monitor.upsideapp.com",
    "dftiscasdwe.w8510.com",
    "dieserbenni.ru",
    "diomedesdiaz.kozow.com",
    "dlpossie.ddnsfree.com",
    "dnsfreedb.ddnsfree.com",
    "dnsupdate.dns1.us",
    "dnsupdate.dns2.us",
    "doare-assets.s3.sa-east-1.amazonaws.com",
    "doboudix1024.mywire.org",
    "doc-0s-44-docstext.googleusercontent.com",
    "doc-10-44-docstext.googleusercontent.com",
    "docs.apl-com.icu",
    "documents.ef971a42.workers.dev",
    "domenubeta.blogspot.com",
    "domenugame.blogspot.com",
    "domtec.com.br",
    "downloads.toptechmanagementgroup.com",
    "downloads.uscga.co",
    "dowon.microsofts.top",
    "drone.ct.ws",
    "dsw.jffdd.icu",
    "dub.dcxbj.icu",
    "dub.xcber.icu",
    "dungeonofdestiny.pages.dev",
    "dvasrdftqgqg.w8510.com",
    "easykill1.servepics.com",
    "easykill2.servepics.com",
    "easykill3.servebeer.com",
    "easykill3.servepics.com",
    "easykill.servebeer.com",
    "ec2-13-215-228-73.ap-southeast-1.compute.amazonaws.com",
    "ecgglass-arq.s3.sa-east-1.amazonaws.com",
    "else-accommodation-allowing-throws.trycloudflare.com",
    "emawattttson.blogspot.com",
    "emmanuelstevo.ddns.net",
    "e-nanny.de",
    "enclavealabang.com",
    "encryption-plugin-signal.com-ae.net",
    "epaper.dawn-323.workers.dev",
    "eufr18-166.workdns.com",
    "evarcoinlate.pages.dev",
    "eveillersonetre.fr",
    "evilginx2.loseyourip.com",
    "evmblock.pages.dev",
    "examp1e.webredirect.org",
    "exclusive.nobogoods.com",
    "extnhpulsedevuks.ciamlogin.com",
    "ex.xnkkg.icu",
    "ezqrvkfgejwctdnc.pnuisckmhwagzvdyjrlbeft.software",
    "faeelt.giize.com",
    "faka888.ggff.net",
    "fakjcsaeyhs.ddnsfree.com",
    "farsirestaurant.com.au",
    "fasceadvcva3.gleeze.com",
    "fc-checker.dlccdn.com",
    "fc.hjffd.icu",
    "f.codingdrunk.cc",
    "fcs.vnvcn.icu",
    "fc.xcbbx.icu",
    "fe01.co.kr",
    "ffosies2024.camdvr.org",
    "fgdedd1dww.gleeze.com",
    "fghs.shlowcarbon.com",
    "fgjjkjjtg.mmm.page",
    "fiber13.dnsiaas.com",
    "fileinc.github.io",
    "file.rightwidth.dev",
    "filetrasfer.wuaze.com",
    "filev2.getsession.org",
    "file.wx2.qq.com",
    "filipinet.ddnsgeek.com",
    "fiordmoss.ddns.net",
    "fjr.qow.mybluehost.me",
    "floatsdk.1cooldns.com",
    "fluid-insurance-741850.framer.app",
    "flux.smshero.co",
    "fonts.apl-org.online",
    "footracker-statics.s3.sa-east-1.amazonaws.com",
    "ford8864.pages.dev",
    "formaldense.weixinpicture.com",
    "forticlient.co.uk",
    "frankmana.duckdns.org",
    "freedns02.dns2.us",
    "freefoodid.com",
    "freeios.theworkpc.com",
    "free-variation-549141.framer.app",
    "fs.fdghe.icu",
    "fs.vjddg.icu",
    "fs.zvdeasa.icu",
    "ftfweiy.ck.page",
    "ftp.3dsportsgins.com",
    "ftp.abcebikes.com",
    "ftp.corwineagles.com",
    "ftp.crescentegramas.com.br",
    "ftp.jeepcommerce.rs",
    "ftp.nadimgadget.shop",
    "ftp.piovau.com",
    "ftp.prokemsc.com",
    "ftp.rgsaudios.top",
    "ftpuser14.gleeze.com",
    "ftp.vikingtrade.rs",
    "ftp.zhenpenn.com",
    "ftpzpak.kozow.com",
    "gabber.42web.io",
    "gagamutakakachota.blogspot.com",
    "gamewss.cloudapi.stream",
    "gardn.org.au",
    "garulouscuto.com",
    "gate.decodo.com",
    "gates.chatonlineapp.com",
    "gatuso.duckdns.org",
    "gbi.segaeg.top",
    "gcdnb.pbrd.co",
    "gco.pdoqs.top",
    "gd.bj2.xyz",
    "geo.netsupportsoftware.com",
    "getsdervicessupoortss.azurewebsites.net",
    "getservicessuports.azurewebsites.net",
    "getservicessupports.azurewebsites.net",
    "getsupportsservices.azurewebsites.net",
    "gev.dsfjd.icu",
    "gff.onlineg.top",
    "gf.uoyty.icu",
    "gimas.bg",
    "gitimundlana.org.in",
    "gitkzxd.pnuisckmhwagzvdyjrlbeft.software",
    "glide.smshero.cc",
    "global.webjine.o-r.kr",
    "globoss.kozow.com",
    "gogo2025up.ddnsfree.com",
    "goldenftp.rf.gd",
    "goldminer.cloudapi.stream",
    "googlel.gleeze.com",
    "googles.accesscam.org",
    "googles.ddnsfree.com",
    "googlett.camdvr.org",
    "googllabwws.gleeze.com",
    "gor.technicalprorj.xyz",
    "gov.incometax.click",
    "gppiwogwndiakkdu.pnuisckmhwagzvdyjrlbeft.software",
    "gra.khabeir.com",
    "gra.nadimgadget.shop",
    "gruposafety.cv",
    "gtaldps31c.ddnsfree.com",
    "guest.saisuarneo.net",
    "gv.ityht.icu",
    "gz.technicalprorj.xyz",
    "haccp.es",
    "haggasinger1.ddns.net",
    "haggasinger2.ddns.net",
    "haggasinger.ddns.net",
    "hamkorg.kozow.com",
    "harvardglobalcollege.co.za",
    "hello.9652136.cc",
    "helloweenhagga2.ddns.net",
    "helloweenhagga3.ddns.net",
    "helloweenhagga4.ddns.net",
    "helloweenhagga.ddns.net",
    "herald-b2a.workers.dev",
    "herculessportslegend.cloudapi.stream",
    "hfksacjfj.mmm.page",
    "hgf.bvwds.icu",
    "hgf.dcnar.icu",
    "hiddify.creepy.ltd",
    "hilzgefagdtguklkfstjryas-iuofyidtuksryjdtukjl.teemill.com",
    "hk2.hjkgghjj.com",
    "hm.ru",
    "homologacao-sisp.s3.sa-east-1.amazonaws.com",
    "honda-m-club.nl",
    "honidoo.loseyourip.com",
    "hosting2.ro.hostsailor.com",
    "hotel.assistgrid.click",
    "hotel.assistgrid.live",
    "hotel.flawconnect.help",
    "hotels-stays23314.com",
    "hotels-stays55501.com",
    "hrefbfdhfhgre-1422102728.cos.ap-hongkong.myqcloud.com",
    "hsa.govsred.buzz",
    "html.aafd.tv",
    "html.phish.microsoft",
    "httpswwwmediafirecomfileek4e9gtur.duckdns.org",
    "hueys.com.au",
    "humimianserver.kesug.com",
    "huygdr12.loseyourip.com",
    "hwsrv-721609.hostwindsdns.com",
    "hwsrv-722288.hostwindsdns.com",
    "ibi-home.com",
    "icebreakersonline.com",
    "icekancusjhea.ddnsgeek.com",
    "icelondonaestheticsclinic.co.uk",
    "idstandsuui.kozow.com",
    "id.vk.authaction.ru",
    "ie721f2d.ala.dedicated.aws.emqxcloud.com",
    "ie.cnfrm-suppsplace-0100.my.id",
    "iiiiopasdfcasd.w8510.com",
    "iikljhg.w8510.com",
    "images-11d.workers.dev",
    "img.tipinfolist.site",
    "importenptoc.com",
    "indoodchat.theworkpc.com",
    "infected-gc-rhythm-yu.trycloudflare.com",
    "info.1cooldns.com",
    "info.symantke.com",
    "inputrreparnt.com",
    "intelupdate.dns1.us",
    "interserv.co",
    "iowxuintgredogzgblrsmr2cx2e471bor.oast.fun",
    "irmaosmantovani.com.br",
    "is-01-ast.ols-img-12.workers.dev",
    "isyraw.quidoaehse.icu",
    "itsartsafrica.co.za",
    "iu.server24x.com",
    "iuyrdfvv.w8510.com",
    "ivx-rpcdebug.pages.dev",
    "iyasdasfda.w8510.com",
    "jarvis001.freeddns.org",
    "jasminsgranville.com.au",
    "jayztools1.ddns.net",
    "jayztools2.ddns.net",
    "jayztools3.ddns.net",
    "job.sijoloo.com",
    "jordanchen7361.sytes.net",
    "jordanchen7362.sytes.net",
    "jordanchen7363.sytes.net",
    "jordanchen736.sytes.net",
    "jsc.bet277.vip",
    "js.cloudflare.cyou",
    "jsc.olacityviet.com",
    "js.officefonts-clo.com",
    "js.targetedtrafficcrew.com",
    "ju.fhjre.icu",
    "k358a192.ala.dedicated.aws.emqxcloud.com",
    "karencann.co.uk",
    "kaushalya.freeddns.org",
    "kavachauthentication.blogspot.com",
    "kavachmail-govin.rf.gd",
    "kcalmoments.s3.me-south-1.amazonaws.com",
    "khyes001ndfpnuewdm.kozow.com",
    "kim.nl.tab.digital",
    "klawd.adityanamansingh.com",
    "kliscjaisdjhi.w8510.com",
    "kmot.co.kr",
    "koiv9.pages.dev",
    "kronoz.duckdns.org",
    "kronozzz2.duckdns.org",
    "ksdfuefagfrukayhfka.eu.cc",
    "kskxoscieontrolanel.gleeze.com",
    "ksudeu.nanguanglu.com",
    "ksv01sokudwongsj.theworkpc.com",
    "kube.lateral.sh",
    "kumakahchachi.blogspot.com",
    "kupacharity.co.za",
    "lalacious1.serveftp.com",
    "lalacious2.serveftp.com",
    "lalacious3.serveftp.com",
    "lalacious4.serveftp.com",
    "laminascol.linkpc.net",
    "lastdance.mysynology.net",
    "lbandugzcfg.deepinspectionsystem.online",
    "lcskiecjj.loseyourip.com",
    "lcskiecs.ddnsfree.com",
    "ldb.rightwidth.dev",
    "ldy.vdfskis888.com",
    "le.codingdrunk.in",
    "liefrung.neu.planen.18-193-117-123.cprapid.com",
    "like.wechatpictureupload.com",
    "link.topck008.com",
    "link.toptoplm88.com",
    "link.vdfskis888.com",
    "liquordropadelaide.com.au",
    "livemigrazsrauns.pages.dev",
    "lkljjhidjaiwd.w8510.com",
    "lkopiyut.w8510.com",
    "llkeyvost.ddns.net",
    "ll.olacityviet.com",
    "ln.run",
    "localhost.apl-com.icu",
    "logger.clob.health",
    "login123.smaillperfumerain.com",
    "login29.secureyouradd.com",
    "login.apl-org.online",
    "login.gogie.com.000000000001.phish.farm",
    "log.pricesheet.ink",
    "longitude-powerpoint-geek-upgrade.trycloudflare.com",
    "loramer1.ddnsking.com",
    "losiesca.ddnsgeek.com",
    "lps2staging.ddnsfree.com",
    "lsls.casacam.net",
    "lsn.edu.dz",
    "lsypdqgxredfpx.mswinsoftupdload.design",
    "ltiuys.ddnsgeek.com",
    "ltiuys.kozow.com",
    "ltkwark.ddns.net",
    "lucky.668823.com",
    "lulla.duckdns.org",
    "lullikhao1.ddns.net",
    "lullikhao2.ddns.net",
    "lullikhao.ddns.net",
    "lunawhatsappgroup.pages.dev",
    "luxtrust.help",
    "luxtrust-help.com",
    "luxtrust-reset.com",
    "lyblqwesfawe.w8510.com",
    "machearkalonikahdi.blogspot.com",
    "magento.titroujo.support",
    "mail.agro.gov.kg.openingfile.net",
    "mail.amageo.ro",
    "mail.antikor.gov.kz.openingfile.net",
    "mail.aop.gov.af.openingfile.net",
    "mail.apollo-page.r-e.kr",
    "mail.ardsmmm.com",
    "mail.cup.org.pk",
    "mail.dermypack.com.my",
    "mail.dongjln.com",
    "mail.dzpn.rs",
    "mail.gov.kg.openingfile.net",
    "mail.hollyhotelmyanmar.com",
    "mail.hyguiq.com",
    "mail-islamabadpolice-gov-pk.ntc-telecommunication-safecity.workers.dev",
    "mail.javalifefurniture.com",
    "mail.maskrisks.com",
    "mail.mbarieservicesltd.com",
    "mail.mfa.gov.kg.openingfile.net",
    "mail.mosir.ehost.pl",
    "mail.musksapcex.space",
    "mail-na-gov-pk.na-gov-pk.workers.dev",
    "mail.oserfech.eu",
    "mail.ozszg.top",
    "mail.pakistangov.com",
    "mail.qiutdsvsusilrngem.org",
    "mail.rbxfjzy.info",
    "mailsdy.gleeze.com",
    "mail.sourc3trade.com",
    "mail.starmech.net",
    "mail.tdscloud.cloud",
    "mail.ticaret.gov.tr-redirect.net",
    "mail.trimnt.com",
    "mail.yanbex.idloginmail.ru",
    "mainnett.pages.dev",
    "majorsss.duckdns.org",
    "maliclick1.ddnsfree.com",
    "manikandan83.mysynology.net",
    "mashriqtraders.com",
    "mastermana1.serveirc.com",
    "mastermana2.serveirc.com",
    "mastermana3.serveirc.com",
    "mastermana4.serveirc.com",
    "mastermana5.serveirc.com",
    "masterpanel.webredirect.org",
    "mauritasszddb.ddnsfree.com",
    "maxfunck.dk",
    "mazenugame.blogspot.com",
    "md-nahid-khan.github.io",
    "meeting.equitaligaiustizia.it",
    "meetls.kozow.com",
    "metal.cloudapi.stream",
    "meusitehostgator.com.br",
    "microsoft.bumbleshrimp.com",
    "microsoft-quarantine-bfi00389390si.ns9c.net",
    "microsoftteams.con-ip.com",
    "mieten.com.ru",
    "miganshumaratamoligossa.blogspot.com",
    "migimigichuchuchacha.blogspot.com",
    "mines.cloudapi.stream",
    "minisdnkjjsj.jtc-gov-sg.com",
    "mint.smshero.com",
    "mjiudwajhkf.w8510.com",
    "ml3.freeddns.org",
    "mlcrosoft.co.com",
    "m.leak-news.com",
    "mlksucnayesk.kozow.com",
    "mmjkjiu.w8510.com",
    "mmmfaco2025.mywire.org",
    "mmnajsdh.w8510.com",
    "mms.bumbleshrimp.com",
    "mmvmtools.giize.com",
    "mnbghjj.w8510.com",
    "mobibagugu.duckdns.org",
    "modgood.gleeze.com",
    "mosplosaq.accesscam.org",
    "mozilla.apl-org.online",
    "mrcode1.hopto.org",
    "mrcode2.hopto.org",
    "mrcode.hopto.org",
    "ms1.hinet.lat",
    "msa.hinet.ink",
    "mtcat.info",
    "multiaccount.cloudapi.stream",
    "mx2.nns.ne.jp",
    "mybtlogin.mmm.page",
    "mybt.mmm.page",
    "myownlogs.duckdns.org",
    "mysql.casacam.net",
    "mystartdata.com",
    "nao.nnnwin.vip",
    "ndsnodoor.com",
    "nenigncagvawr.giize.com",
    "nenignenigoncqvoo.ooguy.com",
    "nenigoncuopzc.accesscam.org",
    "nenigoncuopzc.giize.com",
    "neo.herosms.co",
    "new.apl-org.online",
    "news.tibetonline.info",
    "newth.googlecache.cc",
    "newthmap.googlecache.cc",
    "nidcheck.o-r.kr",
    "nidlogin.apollo.r-e.kr",
    "nid-naverbpk.onthewifi.com",
    "nims.gleeze.com",
    "nisaldwoa.theworkpc.com",
    "nld.blog-view.o-r.kr",
    "nmszablogs.ddnsfree.com",
    "node449013.dwservice.net",
    "node828765.dwservice.net",
    "node896147.dwservice.net",
    "nodekeny11.freeddns.org",
    "nodetestservers.azurewebsites.net",
    "nodjs2o25nodjs.giize.com",
    "nordeacredit0.serv00.net",
    "northcoastradio104.co.za",
    "nova.smshero.ai",
    "npeoples.theworkpc.com",
    "ns1.brownswer.com",
    "ns1.disponibletogether.com",
    "nuclear-rose-7ci1cmml-dpoaxo1bhyxi.edgeone.app",
    "oad1.azhituo.com",
    "oad1.bearsplay.com",
    "oauth.shacloud.o-r.kr",
    "obituary.workers.dev",
    "occasionalsettings.com.au",
    "ocmnusdjdik.w8510.com",
    "od.bnxdkw2s93846.workers.dev",
    "od.nywlwwr0f.workers.dev",
    "office365update.duckdns.org",
    "office.ioansse.com",
    "officeshan.kozow.com",
    "officeupdate.ns01.us",
    "officeupdates.cleansite.us",
    "officewebdoc.com",
    "oiuiasdads.w8510.com",
    "okj.ijnvb.icu",
    "okkstt.ddnsgeek.com",
    "oldatain1.ddnsgeek.com",
    "oldmandnsch.duckdns.org",
    "o.lencr.org",
    "oncukalip.com",
    "onedrive.nuramystic.workers.dev",
    "one.sharafdg.net",
    "onlyosun.ooguy.com",
    "oobe.webjine.o-r.kr",
    "orange-warm-actress.glitch.me",
    "order-public.com",
    "org.idloginmail.ru",
    "org.loginemail.ru",
    "osix.ddnsgeek.com",
    "osmtech-cn.com",
    "ovmmiuy.mywire.org",
    "owa-spamcheck.apl-org.online",
    "palamolscueajfvc.gleeze.com",
    "pan.95bl.com",
    "panel.creepy.ltd",
    "panel.fefea22134.net",
    "passport.yandex.ru.authaction.ru",
    "passport.yanex.ru.authaction.ru",
    "patolino.theworkpc.com",
    "pawanp.kozow.com",
    "pcmainecia.ddnsfree.com",
    "pcvmts3.kozow.com",
    "p.deutschland-zahlung.eu",
    "peisuesacae.loseyourip.com",
    "peowork.ddnsgeek.com",
    "pepesetup.ddnsfree.com",
    "permits.global-transit-authority.org",
    "pewsus.freeddns.org",
    "p.findmeatthe.top",
    "phone-number-sex-dv2.pages.dev",
    "photo.pokok.edu.hk",
    "phpmap.googlecache.cc",
    "pinecreekpictures.com.au",
    "ping.ynrkone.top",
    "pirati.abuser.eu",
    "pitb.gov-pkgov.workers.dev",
    "play.sck-dns.cc",
    "plaza.xo.je",
    "plcoaweniva.ddnsgeek.com",
    "pl.fhm.icu",
    "plllkkoasdko.w8510.com",
    "plugins.jetbrians.net",
    "poc.kjf.icu",
    "poiaqqrjk.w8510.com",
    "pojkkaka.w8510.com",
    "police.tracksyscloud.com",
    "policyagent.theworkpc.com",
    "polokinyea.gleeze.com",
    "ponnet.msk.su",
    "pool-fr.supportxmr.com",
    "pool.hashvault.pro",
    "pool.supportxmr.com",
    "poooooiioasd.w8510.com",
    "post.pageswiss.cfd",
    "pplodsssead222.loseyourip.com",
    "pplosad231.kozow.com",
    "ppppoiiua.w8510.com",
    "ppsabedon.gleeze.com",
    "prakash-college.org.in",
    "prdanjana01.ddnsfree.com",
    "premium.davidabostic.com",
    "prepaid127.freeddns.org",
    "priftp.kozow.com",
    "prihxlcs.ddnsfree.com",
    "prihxlcsw.theworkpc.com",
    "prime.herosms.vip",
    "private-sex-free.pages.dev",
    "process-booking.com",
    "profileupdate-collaboration.stefan-dufva.workers.dev",
    "prolux.com.tr",
    "proradead.s3.sa-east-1.amazonaws.com",
    "proxy.jsjiuah.life",
    "proxy.xxxx.com",
    "pta.sfaeps.edu.hk",
    "public.open-dns.uk",
    "pulsedev.nixonhire.com",
    "pulse.herosms.cc",
    "pussi2442.ddns.net",
    "putevi-srbije.gbgwsq.homes",
    "putevi-srbije.xkuckx.homes",
    "pxlaxvvva.freeddns.org",
    "p.x.rizbegadget.shop",
    "q0r2e5q2dzbykcox9qmkptm12s8mwb.oastify.com",
    "qacassdfawemp.w8510.com",
    "qad.dsgey.icu",
    "qad.edfsg.icu",
    "qad.fdg.icu",
    "qad.uhbds.icu",
    "qatevvay-index1oadinq.pay-employee-bonus-011.workers.dev",
    "qhtckzbxtkdvyr.mswinsoftupdload.design",
    "qmmklou.w8510.com",
    "qq.bcvgdf.icu",
    "quitgod2023luck.giize.com",
    "qwertdvvaaz.w8510.com",
    "rabbit.ooguy.com",
    "ragwah.com",
    "rc.fgrecb.icu",
    "rdf.oijsd.icu",
    "rdf.xstyj.icu",
    "rebeldettern.com",
    "recordar-simmco.s3.sa-east-1.amazonaws.com",
    "recruit.shiohucri.com",
    "redhatupdating432.dnsrd.com",
    "redzone2.apl-org.online",
    "redzone.apl-org.online",
    "relay.aceheritagehouse.top",
    "reloadbar.com.au",
    "repairingsnet.com",
    "reserve.fx313199.com",
    "resources.dawnnewsisl.com",
    "resrve.rhzxcpa.com",
    "resrve.yyhdbz.com",
    "revengerx210.sytes.net",
    "revengerx211.sytes.net",
    "revengerx212.sytes.net",
    "revengerx213.sytes.net",
    "revengerx214.sytes.net",
    "revengerx215.sytes.net",
    "revengerx216.sytes.net",
    "revengerx217.sytes.net",
    "revengerx218.sytes.net",
    "revengerx219.sytes.net",
    "rfv.yoidg.icu",
    "rhel.opsecurity1.art",
    "riders.50kfor50years.com",
    "rivoningoj.co.za",
    "rmcautomotive.co.za",
    "rocean.oca.pics",
    "rpc.adspect.net",
    "rpc-amoy.polygon.technology",
    "rphnvgwa7.hn-bkt.clouddn.com",
    "rsc2018.co.uk",
    "rsm323.kozow.com",
    "ru.authaction.ru",
    "ru.coziest.lol",
    "ruhneuclarke.com",
    "s3-contemp.s3.sa-east-1.amazonaws.com",
    "s6.imgcdn.dev",
    "saf3asg.giize.com",
    "samdwich.pages.dev",
    "satellite2.azurewebsites.net",
    "satellitegardens.azurewebsites.net",
    "satellitespecialists.azurewebsites.net",
    "satservicesdev.azurewebsites.net",
    "scopps.ddnsgeek.com",
    "scottish-if-correct-occupations.trycloudflare.com",
    "screamnet.xyz",
    "sdhite43.ddnsfree.com",
    "sdsuytoins63.kozow.com",
    "sdxsiol.pnuisckmhwagzvdyjrlbeft.software",
    "se2.ggseocdn2.com",
    "se2.ggseocdn.com",
    "seblieos.com",
    "secondfloor.dynuddns.com",
    "sec.opsecurity1.art",
    "sec-t2.fainerkern.ru",
    "secure.adnxs.com",
    "secure.cflayerprotection.com",
    "secure-folder-9f8a2983fbf5479e8d8c267e0df4e73d.3vvcompany.com",
    "seed1.getsession.org",
    "seemasonline.co.in",
    "selfad.gleeze.com",
    "sept.bio",
    "serious.kozow.com",
    "server.img-bing.com",
    "server.microsoftsvc.com",
    "service-3z1ebnpd-1319584009.sh.tencentapigw.com",
    "service-7wu3p58s-1319584009.nj.tencentapigw.com",
    "service-a8vp3r65-1319584009.cd.tencentapigw.com",
    "service-b4ibcyjt-1325935989.sh.tencentapigw.com",
    "service-c2y0jtba-1319584009.gz.tencentapigw.com.cn",
    "service-cyuasu6k-1319584009.nj.tencentapigw.com",
    "service-h87kxr41-1319584009.bj.tencentapigw.com.cn",
    "service-k6iylaqt-1319584009.bj.tencentapigw.com.cn",
    "service-qgezbin5-1319584009.sh.tencentapigw.com",
    "servicessupports.azurewebsites.net",
    "set.daten-aktualisieren24.com",
    "setupcodpr2.freeddns.org",
    "severdops.ddns.net",
    "sgp1.digitaloceanspaces.com",
    "sgsn.accesscam.org",
    "sharepoint-punjab.sharepoint-e13.workers.dev",
    "sh.azurestaticprovider.net",
    "shop-with-erika.mybigcommerce.com",
    "shredline1.torialservice.us",
    "shwewizcomlogchuhadwan.cleverapps.io",
    "signal.ct.ws",
    "sindicaturadetecate.gob.mx",
    "sitemap1.bet277.vip",
    "sitemap.bet277.vip",
    "site.toptopkm88.com",
    "skpye.univer.se",
    "skyrocket1.duckdns.org",
    "sky.wptask.cyou",
    "smartfren.giize.com",
    "sn0son4t31bbsvopou.camdvr.org",
    "sn0son4t31opc.freeddns.org",
    "soc.hero-sms.co",
    "softwareservicesupport.azurewebsites.net",
    "softwareservicesupports.azurewebsites.net",
    "sonutradingcompany.co.in",
    "soovuy.gleeze.com",
    "souzacambos.s3.sa-east-1.amazonaws.com",
    "sp172319.sitebeat.crazydomains.com",
    "spark.herosms.io",
    "speedshare.oss-cn-hongkong.aliyuncs.com",
    "spider.xxxx.com",
    "spotvirtuemonero.pages.dev",
    "spuerkeess-verification.com",
    "ssacawfafwa.w8510.com",
    "sslout.de",
    "sso.bookairway.com",
    "sta-bil.com.au",
    "stackfood.ch",
    "static.chatonlineapp.com",
    "static.krislab.site",
    "static.trendmicrotech.com",
    "status.s3cloud-azure.com",
    "stay-hotel607923.com",
    "stay-rooms100012.com",
    "stays-house492133.com",
    "stevetraders27992.emlnk.com",
    "stg.mistonecorp.net",
    "stg.server24.com",
    "stg.server24x.com",
    "storage-e13.sharepoint-e13.workers.dev",
    "store.appupdate.ai",
    "store.latestversion.ai",
    "study.abroad.ge",
    "styuij.mywire.org",
    "subreviews.azurewebsites.net",
    "sunpass.com-9d4s.top",
    "sunpass.com-j50y.top",
    "supceasfg1.loseyourip.com",
    "supportsoftwarecenter.azurewebsites.net",
    "s-usc1b-nss-2100.firebaseio.com",
    "swamfoxinnc.com",
    "swisspost.page92635.cfd",
    "swy.juanseguros.com",
    "sxf.sagy.site",
    "sx.ssgxvx.icu",
    "sydneycameramarket.com.au",
    "synergistix.net.au",
    "systemsz.kozow.com",
    "systen32.ddns.net",
    "t31c0mjumpcuyerop.ooguy.com",
    "t31c0mopamcuiomx.kozow.com",
    "t31c0mopmiuewklg.webredirect.org",
    "t31c0mopocuveop.accesscam.org",
    "t3lc0mcanyqbfac.loseyourip.com",
    "t3lc0mczmoihwc.camdvr.org",
    "t3lc0mh4udncifw.casacam.net",
    "t3lc0mhasvnctsk.giize.com",
    "t3lm0rtlcagratu.kozow.com",
    "taas.org.in",
    "tch.giize.com",
    "tdk.798love.com",
    "tdkgpt.yyds6686.com",
    "tdtqy-oyaaa-aaaae-af2dq-cai.raw.icp0.io",
    "telcomn.giize.com",
    "telegam.org.loginemail.ru",
    "telegram.akipress.news",
    "telegram.dog",
    "telegramweeee.pro",
    "telegra.org.idloginmail.ru",
    "telegrtam.com.cn",
    "telen.bumbleshrimp.com",
    "telkom.ooguy.com",
    "telkomservices.theworkpc.com",
    "teneta.add-group.site",
    "testateone.w8510.com",
    "testate.w8510.com",
    "tfs.asfjte.icu",
    "tfs.cxbha.icu",
    "tfs.etyur.icu",
    "tfs.gjhdf.icu",
    "tg.cloudapi.stream",
    "tg.sdhju.icu",
    "thaitan.com.au",
    "thbio.kozow.com",
    "theclockdoc.com.au",
    "theuklg.comlaichingte.net",
    "th.ntxx.cn",
    "throbbing-leaf-e96d.gtech.workers.dev",
    "timbabuild.com.au",
    "timpe.kozow.com",
    "timpe.webredirect.org",
    "tititipupupupu.blogspot.com",
    "tlse001hdfuwwgdgpnn.theworkpc.com",
    "tltlsktelko.ddnsfree.com",
    "t.m-kosche.com",
    "tools.usersway.net",
    "topup.cloudapi.stream",
    "torpdidebar.com",
    "totallol1.duckdns.org",
    "totallol2.duckdns.org",
    "totallol3.duckdns.org",
    "totallol.duckdns.org",
    "trahviotsused.com",
    "transport.dynuddns.net",
    "travelidrea.today",
    "treffictesgn.blogspot.com",
    "triplek.co.za",
    "trusterlux.from-la.net",
    "trustwallet-rpc.pages.dev",
    "trvcl.bumbleshrimp.com",
    "tttsiou12.loseyourip.com",
    "tuisasdcxzd.w8510.com",
    "twistarsgymnastics.co.in",
    "txjiqslrrig.mswinsoftupdload.design",
    "tyabbfootballnetballclub.com.au",
    "tyreworld.co.in",
    "t.y.server24x.com",
    "ua2o25yth.ddnsgeek.com",
    "uabeoee.otvidluioad.online",
    "ubr02a151.nns.ne.jp",
    "udieyg.gleeze.com",
    "udste.xidyuyedg.qpon",
    "ugo.wmb.mybluehost.me",
    "uhk.urwyu.icu",
    "unnjunnani.ddnsfree.com",
    "up88qope1z.hlpadditives.com",
    "upd343.winserverupdates.com",
    "upd488.windowservicecemter.com",
    "updatamail.kozow.com",
    "updatasuccess.ddnsgeek.com",
    "update.apl-org.online",
    "update.maskrisks.com",
    "updateservices.kozow.com",
    "updatetools.giize.com",
    "upload.rightwidth.dev",
    "ups-flow-harvester.lovable.app",
    "uqooapp.w8510.com",
    "us2.s3bucket-azure.online",
    "us2.smtp.mailhostbox.com",
    "uscplxsecjs.ddnsgeek.com",
    "usjjsjsj.com.ng",
    "usoshared1.ddnsfree.com",
    "ut.ddgjcv.icu",
    "utorrent-client.github.io",
    "uuiyiyasd.w8510.com",
    "v2979375.hosted-by-vdsina.ru",
    "vals.bumbleshrimp.com",
    "varders.kozow.com",
    "varying-rentals-calgary-predict.trycloudflare.com",
    "va.sdwdf.icu",
    "vass2025.casacam.net",
    "vass.ooguy.com",
    "vdhduatujyatfusg6sgh78-tw5ygj2trhgd8ghndsa6afh.teemill.com",
    "vdoph.securesystemsshield.com",
    "verwalten-sbb-informationen-managecff-kundenportal-online.codeanyapp.com",
    "vgu.kgfhre.icu",
    "vhu.kgfhre.icu",
    "vip.gaelh.cn",
    "vivid.smshero.vip",
    "vmtools.camdvr.org",
    "vmtools.loseyourip.com",
    "vn.coronavg99.com",
    "vnfll22.keeploong.com",
    "voicesharped.com",
    "vosies.ddnsfree.com",
    "vpaspmine.freeddns.org",
    "vpn.optimaserwis.pl",
    "vsa.ahamar.com",
    "wailian.brcknkblue.com",
    "wailian.eglotanygfa.vip",
    "wailian.vn6789sky.com",
    "wailian.zavinac.net",
    "wdlcamaakc.ooguy.com",
    "wds.zvm.icu",
    "webdav.mydrive.ch",
    "webdav.opendrive.com",
    "webdav.yandex.ru",
    "webmail.homesmountain.com",
    "webmail.onlinearuba.net",
    "webmail.rpcthai.com",
    "websupportprotection.azurewebsites.net",
    "web.telegam.org.loginemail.ru",
    "web.telegpam.ru",
    "web.telegra.org.idloginmail.ru",
    "web.tellandgram.ru",
    "weeklyoptional.ddns.net",
    "welcome.careerscrews.com",
    "welcome.careersengage.com",
    "welcome.careersgrower.com",
    "welcome.careersprogress.com",
    "welcome.careersstaffgrid.com",
    "welcome.careerssuccess.com",
    "welcome.careerstaffer.com",
    "welcome.careerstransform.com",
    "welcome.careersupskill.com",
    "welcome.careersworkflow.com",
    "wellnesscaremed.com",
    "wellnessedcare.org",
    "wellnessmedcare.org",
    "wheel.cloudapi.stream",
    "win.anababayala.com",
    "win.feezossl.xyz",
    "winfoss1.kozow.com",
    "winterknowing.ddns.net",
    "winupdate.ns02.us",
    "wmllxwkg.w8510.com",
    "wordpresss-data.s3.me-south-1.amazonaws.com",
    "worker-flat-king-20bd.gomeyog664.workers.dev",
    "worker-shrill-mud-632c.amcobisolutions.workers.dev",
    "workers-playground-dawn-hat-9dee.fsrooferiinc.workers.dev",
    "workfine11.duckdns.org",
    "worldcore.traibiru.world",
    "ws.bnfhfd.icu",
    "ws.dsgsv.icu",
    "ws.tyrrt.icu",
    "ws.vdsfsh.icu",
    "wwfygid.biz.id",
    "www.0090.pizza",
    "www.030062920.xyz",
    "www.0303588a47.buzz",
    "www.031235066.xyz",
    "www.100millionjobs.africa",
    "www.1126xx.shop",
    "www.16544.pizza",
    "www.168-gov.info",
    "www.183257.legal",
    "www.1fuli9902.shop",
    "www.2hvve.xyz",
    "www.3jkwi1.net",
    "www.4x7qdcd4.vip",
    "www.52628.xyz",
    "www.54824867.xyz",
    "www.5555635.com",
    "www.5970.pizza",
    "www.6hcwz.info",
    "www.82765.ltd",
    "www.8oosnny.xyz",
    "www.9769.mobi",
    "www.abbrv.dev",
    "www.accusolution.pro",
    "www.activeusers.tech",
    "www.afaeq.com",
    "www.aftabir.com",
    "www.agfov4u.xyz",
    "www.agiararoma.net",
    "www.agunsa.com.pe",
    "www.airtechkargo.com",
    "www.aja168e.live",
    "www.alfatex.com",
    "www.allsalewatermost.shop",
    "www.aloezhealthcare.info",
    "www.anene.net",
    "www.aportsystems.store",
    "www.aquarta.store",
    "www.arborinstitute.live",
    "www.arimatch-in.legal",
    "www.artbysnim.store",
    "www.arwintarim.xyz",
    "www.asglobalaz.shop",
    "www.askvtwv8.top",
    "www.avid-hildebrand.info",
    "www.awhgfr.info",
    "www.axcapitaltrading.com",
    "www.banjia0731.icu",
    "www.batuhanbingol.xyz",
    "www.behm.info",
    "www.bfootball.net",
    "www.bilbrook.info",
    "www.biocaracol.online",
    "www.bioservicetunisie.com",
    "www.blockconnect.tech",
    "www.blocs-de-com.fr",
    "www.bnm-gov.net",
    "www.bolakoin.com",
    "www.bonheur.tech",
    "www.brispere.site",
    "www.btbjpu.info",
    "www.b-ts.de",
    "www.buildfuture.website",
    "www.bwk1nub0.vip",
    "www.cassino.fund",
    "www.cassino.legal",
    "www.celestial-guides.shop",
    "www.cftengberg.com",
    "www.cgc-grothe.de",
    "www.cheapwil.shop",
    "www.childhealth.pro",
    "www.chiro.live",
    "www.chivor.xyz",
    "www.christelaneli.com",
    "www.christmas-goods.store",
    "www.cikolatasampuan.xyz",
    "www.cipv.ngo",
    "www.cloudvn.info",
    "www.club33lagree.com",
    "www.clusee.com",
    "www.cmevents.pro",
    "www.codingdrunk.in",
    "www.cosmicpharma-bd.com",
    "www.cpcrayd.store",
    "www.crazymeme.xyz",
    "www.crm-grifprava.online",
    "www.daes.com.my",
    "www.ddvids.xyz",
    "www.dekorent.de",
    "www.desktitle.homes",
    "www.dj1.lat",
    "www.dkeqqi.info",
    "www.dl6yfsl.com",
    "www.dnft.immo",
    "www.dreamtravel.click",
    "www.dupescents.shop",
    "www.duxrib.xyz",
    "www.easyfindingsden.shop",
    "www.eatbox.store",
    "www.ebsmadrid.store",
    "www.ef4refef.sbs",
    "www.efvvvb.info",
    "www.einpisalpace.shop",
    "www.eleefmestreech.online",
    "www.elettrocoltura.info",
    "www.enelog.xyz",
    "www.epdemexi.lat",
    "www.erpangina-treatment-views.sbs",
    "www.escapar.xyz",
    "www.esetinc.com",
    "www.esushi.xyz",
    "www.expertwriting.biz",
    "www.f66el619d.shop",
    "www.fath.shop",
    "www.fersigorta.xyz",
    "www.fine-food.it",
    "www.fkxwama7ebnluzontqx2lq.com",
    "www.fluffymooncat.fun",
    "www.forscherhaus-gesamtschule.de",
    "www.forte.farm",
    "www.fossbytes.com",
    "www.fr5g.sbs",
    "www.frs.ma",
    "www.fucwnq.info",
    "www.furrcali.xyz",
    "www.fwdjdlex.shop",
    "www.fz977.xyz",
    "www.fzmmkj.shop",
    "www.gameo.info",
    "www.garderobenheld.de",
    "www.gariano.info",
    "www.gayhxi.info",
    "www.geotherm-haustechnik.de",
    "www.glyttera.shop",
    "www.go2000.cn",
    "www.godeepak.com",
    "www.gogo.direct",
    "www.grimbo.boats",
    "www.growthzen.site",
    "www.guiguantop.top",
    "www.guilda.pro",
    "www.gut-rosenkrantz.de",
    "www.haoyun.website",
    "www.haro.com",
    "www.haworth-europe.com",
    "www.heinzlbrandschutz.de",
    "www.hilgers-transport.de",
    "www.hjhjk.wiki",
    "www.hwak.live",
    "www.ilskdeid.o-r.kr",
    "www.inlaypro.store",
    "www.intercosped.co.th",
    "www.internetweixin.com",
    "www.iotokenization.com",
    "www.iquery.xyz",
    "www.itcomp.store",
    "www.itiz.xyz",
    "www.ityht.icu",
    "www.ive-neurozoom.store",
    "www.j8g5rjpc.top",
    "www.jackys.shop",
    "www.jrcov55qgcxp5fwa.top",
    "www.jrkfizx.top",
    "www.jumpiis8.com",
    "www.karasek.co.at",
    "www.kasun.wtf",
    "www.kdzdpvltoaqw.com",
    "www.kerrylogistics.com",
    "www.kjuw.party",
    "www.ky0128.net",
    "www.l33900.xyz",
    "www.l51127.xyz",
    "www.layunin.xyz",
    "www.leadtochanges.com",
    "www.legaleepr.com",
    "www.leveledge.sbs",
    "www.locarry.store",
    "www.lodepot.com",
    "www.lphatechblog.xyz",
    "www.lsaadmart.store",
    "www.lucky-crownarena.click",
    "www.lucynoel6465.shop",
    "www.lugao.xyz",
    "www.m2313.com",
    "www.m233jt.info",
    "www.maceoconsultores.net",
    "www.malamute-usa.com",
    "www.maplesyrup7.click",
    "www.marivo.website",
    "www.mashdtv.xyz",
    "www.mcofea.com",
    "www.meeten.us",
    "www.meetio.one",
    "www.meetone.gg",
    "www.menut.at",
    "www.metaframex.digital",
    "www.mialogistica.cloud",
    "www.milays.cloud",
    "www.mostbetepp.site",
    "www.mraber.dev",
    "www.mymsuccess.com",
    "www.mytcigroup.com",
    "www.nakaligtas.xyz",
    "www.nakasek.info",
    "www.ndibstersoft.com",
    "www.ndogaming.online",
    "www.newbh.pro",
    "www.newwechat.com",
    "www.nhc7tdkp6.live",
    "www.nivamedical.com",
    "www.nortonet.com",
    "www.nosolofichas.online",
    "www.oftware-download-92806.bond",
    "www.ome-renovation-86342.bond",
    "www.omp037621r.vip",
    "www.online-wechat.com",
    "www.onlinewechat.com",
    "www.onlineweixin.net",
    "www.onlinewxapp.net",
    "www.oonlightshadow.shop",
    "www.openculture.com",
    "www.orashrine.store",
    "www.orld-visa-center.online",
    "www.orthomumbai.online",
    "www.os7mj54hx4pwvwobohhh6.com",
    "www.otelhafnia.info",
    "www.ozon.ru",
    "www.pafipemdatangerang.org",
    "www.pembukaan.xyz",
    "www.perfectgame.cloud",
    "www.phasedesignonline.com",
    "www.physicsbrain.xyz",
    "www.pidinozka.sk",
    "www.polarfrost.fi",
    "www.ppgroup.agency",
    "www.proforge.ru",
    "www.promocao.info",
    "www.puerform.ch",
    "www.qqnmqciug.com",
    "www.quantumshopping.vip",
    "www.rambiler.com",
    "www.rcgeek.co.uk",
    "www.ripbgs.info",
    "www.rotover.de",
    "www.rpa.asia",
    "www.rtp189z.lat",
    "www.rumpchiefofstaff.store",
    "www.sandoo.com",
    "www.satoshichecker.xyz",
    "www.sbrqmu.info",
    "www.scbuxjj.shop",
    "www.segurooshop.shop",
    "www.serenepath.life",
    "www.serverwechat.com",
    "www.sgu-consulting.com",
    "www.sharefree88k24.click",
    "www.shibbets.xyz",
    "www.si.art",
    "www.sigaque.today",
    "www.sjrqze.info",
    "www.slickvpn.com",
    "www.smartstart360.com",
    "www.socialentertainments.store",
    "www.sparkletime.cloud",
    "www.spedition-boedeker.de",
    "www.spinco.news",
    "www.sportsstories.gr",
    "www.sscexampyq.watches",
    "www.steffengastro.ch",
    "www.stellaritemvault.shop",
    "www.stormise.rest",
    "www.suntat.de",
    "www.superhoroz.xyz",
    "www.supuerkeess.com",
    "www.svapo-discount.net",
    "www.szty13.vip",
    "www.tegacklephys.com",
    "www.teknikgumruk.com.tr",
    "www.terraero.my",
    "www.themutznuts.xyz",
    "www.theweb.services",
    "www.thomet.net",
    "www.threelineshipping.com",
    "www.tirnelovaxor.ru",
    "www.toptipvideo.com",
    "www.trosky.lol",
    "www.truckgoway.info",
    "www.tsxj0w.info",
    "www.txwect.com",
    "www.u75lmwdgp0du.homes",
    "www.unitedsharesbank.com",
    "www.unusualtransaction.com",
    "www.urvivalflashlights.shop",
    "www.used-cars-auto.xyz",
    "www.us-urbanservices.net",
    "www.uvfr4ep.com",
    "www.uzshou.world",
    "www.verificationsbycapcha.center",
    "www.vic.apollo-star7.kro.kr",
    "www.vichel.ru",
    "www.vikingshielder.com",
    "www.vivamente.shop",
    "www.vivo52.xyz",
    "www.vizdefender.online",
    "www.volticwaterghana.info",
    "www.voyagu.info",
    "www.weberbrushes.com",
    "www.wechatimghs.com",
    "www.weetogether.top",
    "www.weilaishijie.xyz",
    "www.wetransfering.com",
    "www.wiznap.com",
    "www.woca.group",
    "www.xiagao886.com",
    "www.xn--girsdom-9ya.com",
    "www.xrrkkv.info",
    "www.xt3tiue7xxeahd5lbz.com",
    "www.xxxx.vip",
    "www.yacolca.digital",
    "www.yasdl.com",
    "www.yb425ty.xyz",
    "www.yselection.xyz",
    "www.yueolt.shop",
    "www.zelinka.cz",
    "www.zkkv3oae.vip",
    "www.zkplant.xyz",
    "www.zucchini.pro",
    "www.zvdeasa.icu",
    "ww.xbhff.icu",
    "xiiltrionsoledadprod.s3.sa-east-1.amazonaws.com",
    "xmr-eu1.nanopool.org",
    "xmr.kryptex.network",
    "xmr.sh.sh",
    "xn--girsdom-9ya.com",
    "xpopup.pe.kr",
    "x.solscan.live",
    "xx.cxbdf.icu",
    "yanbex.idloginmail.ru",
    "yandex.ru.authaction.ru",
    "yanex.ru.authaction.ru",
    "ycpatent.co.kr",
    "yemozagame.blogspot.com",
    "yg.dah.icu",
    "yg.utyus.icu",
    "ygv.joujg.icu",
    "yhbfl.dfuewe.icu",
    "yhbfl.fhiugcx.icu",
    "yhdjtylnsmwvuu.deepinspectionsystem.online",
    "yrn.rfsfh.icu",
    "ysiohbk.camdvr.org",
    "yu3.io",
    "yyds.tmpdrsh.com",
    "zadelom.ru",
    "zammffayhd.ddnsfree.com",
    "zasdfgasd.w8510.com",
    "zc.bnfhf.icu",
    "zda4g4.w8510.com",
    "zda896.w8510.com",
    "zda9ol.w8510.com",
    "zdaaac.w8510.com",
    "zdaasdafq.w8510.com",
    "zdabnv.w8510.com",
    "zdacasc.w8510.com",
    "zdacasdc.w8510.com",
    "zdacawca.w8510.com",
    "zdacccz.w8510.com",
    "zdacppao.w8510.com",
    "zdacscswc.w8510.com",
    "zdacvb.w8510.com",
    "zdacvbzzs.w8510.com",
    "zdacwaca.w8510.com",
    "zdacwrf.w8510.com",
    "zdacx46.w8510.com",
    "zdacxdawdas.w8510.com",
    "zdacxzd.w8510.com",
    "zdaczcaaw.w8510.com",
    "zdaczcvs1.w8510.com",
    "zdaczsc.w8510.com",
    "zdaczvs.w8510.com",
    "zdaczxc1.w8510.com",
    "zdafaa.w8510.com",
    "zdamkl.w8510.com",
    "zdaplm.w8510.com",
    "zdapoi.w8510.com",
    "zdapoq.w8510.com",
    "zdaqggh.w8510.com",
    "zdaqwfasf.w8510.com",
    "zdavva.w8510.com",
    "zdaxcxzc.w8510.com",
    "zdazzz.w8510.com",
    "zdcacaw.w8510.com",
    "zdcawca.w8510.com",
    "zdpoa.w8510.com",
    "zdpog.w8510.com",
    "zdqqqqwe.w8510.com",
    "zdzvbs.w8510.com",
    "zero-berlin-covenant.apl-org.online",
    "zest.hero-sms.ai",
    "zhukov.github.io",
    "zinderhola1.ddns.net",
    "zinderhola.ddns.net",
    "zmcmvmbm.ddnsfree.com",
    "zoom.callservice.us",
    "zoom.osutuga7.workers.dev",
    "zpb.2023bp.top",
    "zr6dgshpvf.flosli.com",
    "zwmn350n3o1fsdf3gs.kozow.com",
    "zwmn350n3o1ugety2xbe.camdvr.org",
    "zwmn350n3o1vsdrggs.ddnsfree.com",
    "zwt310n3o1unety2kab.webredirect.org",
    "zwt310n3o2unety6a3k.kozow.com",
    "zwt31n3t0nidoqmve.camdvr.org",
    "zwt3ln3t1aimckalw.theworkpc.com",
    "zzxnjiq.w8510.com",
    "zzzcmsq.w8510.com"
  ]
}