List of malicious URLs from public websites

Date Source URL IP Description
15-12-2016 RansomwareTracker http://xlr8services.com/n970foumf 216.139.23.2 Ransomware-Locky-Distribution Site
15-12-2016 RansomwareTracker http://172.246.84.150/zxc678 172.246.84.150 Ransomware-Locky-Distribution Site
15-12-2016 RansomwareTracker http://hedefosgb.com/dpyzsb6u 185.85.205.18 Ransomware-Locky-Distribution Site
15-12-2016 RansomwareTracker http://www.majorleaguesecurity.com/zxc678 107.180.23.105 Ransomware-Locky-Distribution Site
15-12-2016 RansomwareTracker http://ucbus.net/usdxqqt6 211.149.250.179 Ransomware-Locky-Distribution Site
15-12-2016 Malc0de www.monitorspeakers.net/up1/1/4fv3b5.exe 72.167.232.152 Suspicious
15-12-2016 PhishTank http://add-secure.clan.su/sign-account-page.html 213.174.157.151 Phishing-Facebook
15-12-2016 PhishTank http://diana.winhill.pro/system/last.php 193.0.61.36 Phishing-"Internal Revenue Service"
15-12-2016 PhishTank http://markina.com.ua/wp-includes/fonts/USTaxRefundation/www.irs.com/ 46.182.84.245 Phishing-"Internal Revenue Service"
15-12-2016 PhishTank http://chatfellow.com/irs/ 192.169.180.89 Phishing-"Internal Revenue Service"
15-12-2016 PhishTank http://foreverlashesberkshire.co.uk/wp/wp-includes/rest-api/nabx/index.php 173.199.165.184 Phishing-Other
15-12-2016 PhishTank http://amfhs.edu.bd/dropboxhtm2/21f43dbbc5289acf2dd17d25b750779b/ N/A Phishing-Other
15-12-2016 PhishTank http://googledocfiles.com/filewords/index.php/ 184.168.221.56 Phishing-Other
15-12-2016 PhishTank http://jackofallmasterofnone.com/wp-content/wellsfargo/welcome/onliney/das/cgi-bin/session.cgisessargs=EOaL4xQJLVixkEkfXvfniRyuOlYGL2ul/session.cgiscreenid=SIGNON_PORTAL_PAUSE/new/verifica.php/verify.php/ 143.95.237.5 Phishing-"Wells Fargo"
14-12-2016 VxVault csgolegal.com/pony/shit.exe 104.27.168.25 Suspicious file
14-12-2016 VxVault www.marcinkwasny.com/wp-admin/includes/pm2.dll 88.198.69.134 Suspicious file
14-12-2016 VxVault bargainshop.councilofcoders.com/wp-includes/pm2.dll 162.249.2.136 Suspicious file
14-12-2016 VxVault guusmeuwissen.nl/wp-admin/includes/pm2.dll 85.17.199.99 Suspicious file
14-12-2016 VxVault www.machankin.ru/wp-includes/pomo/pm2.dll 185.26.122.54 Suspicious file
14-12-2016 VxVault angatutiradentes.com/wp-includes/pm2.dll 200.98.246.172 Suspicious file
14-12-2016 VxVault www.butterfly.idv.tw/wp-content/themes/dust-317/pm2.dll 114.32.154.51 Suspicious file
14-12-2016 VxVault 81.177.26.216/50001c.exe 81.177.26.216 Suspicious file
14-12-2016 VxVault artcommitted.com/wp-includes/js/json2.uio 85.128.165.49 Suspicious file
14-12-2016 VxVault www.marcinkwasny.com/wp-admin/includes/inst1.exe 88.198.69.134 Suspicious file
14-12-2016 VxVault bargainshop.councilofcoders.com/wp-includes/inst1.exe 162.249.2.136 Suspicious file
14-12-2016 VxVault guusmeuwissen.nl/wp-admin/includes/inst1.exe 85.17.199.99 Suspicious file
14-12-2016 VxVault www.machankin.ru/wp-includes/pomo/inst1.exe 185.26.122.54 Suspicious file
14-12-2016 VxVault angatutiradentes.com/wp-includes/inst1.exe 200.98.246.172 Suspicious file
14-12-2016 VxVault www.butterfly.idv.tw/wp-content/themes/dust-317/inst1.exe 114.32.154.51 Suspicious file
14-12-2016 VxVault 89.248.169.50/cron 89.248.169.50 Suspicious file
14-12-2016 VxVault 89.248.169.50/sh 89.248.169.50 Suspicious file
14-12-2016 VxVault 89.248.169.50/ftp 89.248.169.50 Suspicious file
14-12-2016 VxVault 89.248.169.50/bash 89.248.169.50 Suspicious file
14-12-2016 VxVault doconlineaof.top/read.php?f=404 23.95.37.89 Suspicious file
14-12-2016 VxVault ustadhanif.com/nbv364 208.75.151.108 Suspicious file
14-12-2016 VxVault doclosegoa.top/read.php?f=404 23.95.37.89 Suspicious file
14-12-2016 VxVault ao5uvedqfplfrwp3.onion.to/explore.exe 185.100.85.150 Suspicious file
14-12-2016 VxVault dux.baidu.com/toihm6 180.76.189.110 Suspicious file
14-12-2016 VxVault 89.40.181.39/file/e.exe 89.40.181.39 Suspicious file
14-12-2016 VxVault m.cuisines-aviva.com/q3hopc9w 84.16.92.11 Suspicious file
14-12-2016 VxVault porticutoof.info/search.php 54.89.147.221 Suspicious file
14-12-2016 VxVault watchmeninc.com/nbv364 129.121.16.229 Suspicious file
14-12-2016 VxVault pacworld.com/nbv364 66.135.61.97 Suspicious file
14-12-2016 VxVault wasulab.com/helpconfig.exe 122.155.18.63 Suspicious file
14-12-2016 VxVault antonbogov.com/nbv364 185.29.16.40 Suspicious file
14-12-2016 VxVault tunca.bel.tr/nbv364 94.102.7.201 Suspicious file
14-12-2016 VxVault allan.multimediedesignerskive.dk/nbv364 212.97.132.126 Suspicious file
14-12-2016 VxVault seven-cards.com/nbv364 79.175.164.12 Suspicious file
14-12-2016 VxVault johndada.se/pzn0d9w 162.144.128.140 Suspicious file
14-12-2016 VxVault decouer.com/ohpj3 162.252.105.157 Suspicious file