<commit_before># Copyright (c) 2014-2020 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://twitter.com/JAMESWT_MHT/status/1179318187588014080
# Reference: https://app.any.run/tasks/4c32ed32-d6f6-4f13-8a9e-b80a93903881/

172.16.17.32:80
172.16.17.32:80
simplebutmatters.com
selltokengarff.com
ktxhome.com

# Reference: https://www.certego.net/en/news/malware-tales-ftcode/

southerntransitions.com
southerntransitions.net

# Reference: https://otx.alienvault.com/pulse/5d8c84e81ec4039d1b005284

aheshotboard.info
theshotboard.net
tith.in
qvo5sd7p5yazwbrgioky7rdu4vslxrcaeruhjr7ztn3t2pihp56ewlqd.onion

# Reference: https://twitter.com/Racco42/status/888168747160285185

m1-systems.xyz

# Reference: https://twitter.com/reecdeep/status/1179672368958058496

goteamrob.com
isdes.com

# Reference: https://twitter.com/reecdeep/status/1181822906629795840

heritage-insuranceagency.com
heritageinsuranceco.com

# Reference: https://twitter.com/reecdeep/status/1183638995655450624

dhinsuranceservices.com
upstatefinancialconsultants.com

# Reference: https://twitter.com/reecdeep/status/1184055154838032384

contractorquote.info
cnyboypower.com

# Reference: https://twitter.com/reecdeep/status/1184124740631498754

heritageinsuranceagencies.com

# Reference: https://twitter.com/reecdeep/status/1184777885468508161

heritageins.co
heritageagencies.com

# Reference: https://twitter.com/reecdeep/status/1186223241741983744

dennishughesagency.com
hagertyquote.com

# Reference: https://app.any.run/tasks/26105848-f1d3-49cd-9448-5fb7de7c9b63/

jestersofnewyork.com

# Reference: https://twitter.com/VirITeXplorer/status/1186960988471545857

jestersofnewyork.com
bsspta.org
bsspta.com

# Reference: https://twitter.com/reecdeep/status/1188723805302218755

thrivingforyou.com
thomasmargiotti.com
adranswers.com
nnrebar.com

# Reference: https://twitter.com/reecdeep/status/1188741877190811648

tugnutz.com

# Reference: https://app.any.run/tasks/47034cbd-a8f9-49ab-b075-8a54e9e305fe/

confessyoursins.mobi
surviveandthriveparenting.com

# Reference: https://pastebin.com/DB2pFiNr

positivelifeology.com
drkko.com
positiveparentology.com
foodforthoughtkids.com
kkphd.com
slipacard.com
respectandacceptdiversity.com
surviveandthriveparenting.com

# Reference: https://twitter.com/reecdeep/status/1191259036647342080
# Reference: https://pastebin.com/vD6td8rm

hopedalebooks.com
dbimages.com
thegratitudelistproject.org

# Reference: https://twitter.com/reecdeep/status/1192402331494764545

shadysidechurch.com

# Reference: https://twitter.com/reecdeep/status/1192833873991872512

cfmontessori.com

# Reference: https://www.cert-pa.it/notizie/possibile-nuova-campagna-ftcode/
# Reference: https://www.cert-pa.it/wp-content/uploads/2019/11/evento_TT4825_20191118-093753.txt

willjohnson.net
aphistoryonline.com
meganjohnson.net

# Reference: https://twitter.com/reecdeep/status/1196355343678353408
# Reference: https://pastebin.com/8cZzvMGm

jzinky.com
rideswithoutsaddle.com

# Reference: https://www.cert-pa.it/wp-content/uploads/2019/11/evento_TT4825_20191118-113854.txt

kenworthreevesjr.com
embracealegacy.com
chasingredford.com

# Reference: https://twitter.com/reecdeep/status/1197477734253027333
# Reference: https://pastebin.com/nzEJJaB1

giveono.com
clothingaddiction.club

# Reference: https://twitter.com/reecdeep/status/1198927020312453121

rkeindustries.com
rkeindustries.net
rkeindustries.info
rancholacolina.info

# Reference: https://twitter.com/0xSirDom/status/1199667780515225600

emarv.com
its1ofakind.com
lotsofbiz.com

# Reference: https://twitter.com/reecdeep/status/1204017823896555521

mcorea.com
pupusas.net

# Reference: https://twitter.com/0xSirDom/status/1204461098717585410

securewebgateway.com
unifiedthreatmanagementutm.com

# Reference: https://www.cert-pa.it/wp-content/uploads/2019/12/evento_TT5018_20191213-170742.txt

aurelianoelle.com

# Reference: https://www.kpn.com/security-blogs/FTCODE-taking-over-a-portion-of-the-botnet.htm
# Reference: https://www.virustotal.com/gui/ip-address/192.168.3.11/details

agvlmjawmta0.top
agvlmjawmta1.top
agvlmjawmtax.top
agvlmjawmtay.top
agvlmjawmtaz.top
agvlmjawmtew.top
agvlmjawmzew.top
agvlmjawmzex.top
agvlmtkxmjuy.top
agvlmtkxmtq2.top
agvlmtkxmtq4.top
agvlmtkxmtq5.top
agvlmtkxmtuw.top
agvlmtkxmtux.top
agvlmtkxmtuy.top
ahmwmtkxmtq2.top
amq1mtkxmtq2.top
bxfmmtkxmtq2.top
ehuxmtkxmtq2.top
ehuxmtkxmtq3.top
rkeinsustries.com

# Reference: https://app.any.run/tasks/fb7c57f9-6218-42f2-bd5f-977b7b293fea/

whoisyourhero.com

# Reference: https://twitter.com/reecdeep/status/1234410379201187840

guthriebiblebaptistchurch.com
siemtools.com
tribalalpha.com

# Reference: https://twitter.com/luc4m/status/1241000563262853121

carlaarrabito.it

# Reference: https://twitter.com/JAMESWT_MHT/status/1241007134109831169
# Reference: https://app.any.run/tasks/531ca9d6-c9b6-4c82-8cfe-1c3fa50534cb/

mgm.perc-up.com
tetto.carlaarrabitoarchitetto.it

# Reference: https://twitter.com/reecdeep/status/1244574825659711491

jasonrsheldon.com
vertexadvising.com
<commit_msg>Update ftcode.txt<commit_after># Copyright (c) 2014-2020 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://twitter.com/JAMESWT_MHT/status/1179318187588014080
# Reference: https://app.any.run/tasks/4c32ed32-d6f6-4f13-8a9e-b80a93903881/

172.16.17.32:80
172.16.17.32:80
simplebutmatters.com
selltokengarff.com
ktxhome.com

# Reference: https://www.certego.net/en/news/malware-tales-ftcode/

southerntransitions.com
southerntransitions.net

# Reference: https://otx.alienvault.com/pulse/5d8c84e81ec4039d1b005284

aheshotboard.info
theshotboard.net
tith.in
qvo5sd7p5yazwbrgioky7rdu4vslxrcaeruhjr7ztn3t2pihp56ewlqd.onion

# Reference: https://twitter.com/Racco42/status/888168747160285185

m1-systems.xyz

# Reference: https://twitter.com/reecdeep/status/1179672368958058496

goteamrob.com
isdes.com

# Reference: https://twitter.com/reecdeep/status/1181822906629795840

heritage-insuranceagency.com
heritageinsuranceco.com

# Reference: https://twitter.com/reecdeep/status/1183638995655450624

dhinsuranceservices.com
upstatefinancialconsultants.com

# Reference: https://twitter.com/reecdeep/status/1184055154838032384

contractorquote.info
cnyboypower.com

# Reference: https://twitter.com/reecdeep/status/1184124740631498754

heritageinsuranceagencies.com

# Reference: https://twitter.com/reecdeep/status/1184777885468508161

heritageins.co
heritageagencies.com

# Reference: https://twitter.com/reecdeep/status/1186223241741983744

dennishughesagency.com
hagertyquote.com

# Reference: https://app.any.run/tasks/26105848-f1d3-49cd-9448-5fb7de7c9b63/

jestersofnewyork.com

# Reference: https://twitter.com/VirITeXplorer/status/1186960988471545857

jestersofnewyork.com
bsspta.org
bsspta.com

# Reference: https://twitter.com/reecdeep/status/1188723805302218755

thrivingforyou.com
thomasmargiotti.com
adranswers.com
nnrebar.com

# Reference: https://twitter.com/reecdeep/status/1188741877190811648

tugnutz.com

# Reference: https://app.any.run/tasks/47034cbd-a8f9-49ab-b075-8a54e9e305fe/

confessyoursins.mobi
surviveandthriveparenting.com

# Reference: https://pastebin.com/DB2pFiNr

positivelifeology.com
drkko.com
positiveparentology.com
foodforthoughtkids.com
kkphd.com
slipacard.com
respectandacceptdiversity.com
surviveandthriveparenting.com

# Reference: https://twitter.com/reecdeep/status/1191259036647342080
# Reference: https://pastebin.com/vD6td8rm

hopedalebooks.com
dbimages.com
thegratitudelistproject.org

# Reference: https://twitter.com/reecdeep/status/1192402331494764545

shadysidechurch.com

# Reference: https://twitter.com/reecdeep/status/1192833873991872512

cfmontessori.com

# Reference: https://www.cert-pa.it/notizie/possibile-nuova-campagna-ftcode/
# Reference: https://www.cert-pa.it/wp-content/uploads/2019/11/evento_TT4825_20191118-093753.txt

willjohnson.net
aphistoryonline.com
meganjohnson.net

# Reference: https://twitter.com/reecdeep/status/1196355343678353408
# Reference: https://pastebin.com/8cZzvMGm

jzinky.com
rideswithoutsaddle.com

# Reference: https://www.cert-pa.it/wp-content/uploads/2019/11/evento_TT4825_20191118-113854.txt

kenworthreevesjr.com
embracealegacy.com
chasingredford.com

# Reference: https://twitter.com/reecdeep/status/1197477734253027333
# Reference: https://pastebin.com/nzEJJaB1

giveono.com
clothingaddiction.club

# Reference: https://twitter.com/reecdeep/status/1198927020312453121

rkeindustries.com
rkeindustries.net
rkeindustries.info
rancholacolina.info

# Reference: https://twitter.com/0xSirDom/status/1199667780515225600

emarv.com
its1ofakind.com
lotsofbiz.com

# Reference: https://twitter.com/reecdeep/status/1204017823896555521

mcorea.com
pupusas.net

# Reference: https://twitter.com/0xSirDom/status/1204461098717585410

securewebgateway.com
unifiedthreatmanagementutm.com

# Reference: https://www.cert-pa.it/wp-content/uploads/2019/12/evento_TT5018_20191213-170742.txt

aurelianoelle.com

# Reference: https://www.kpn.com/security-blogs/FTCODE-taking-over-a-portion-of-the-botnet.htm
# Reference: https://www.virustotal.com/gui/ip-address/192.168.3.11/details

agvlmjawmta0.top
agvlmjawmta1.top
agvlmjawmtax.top
agvlmjawmtay.top
agvlmjawmtaz.top
agvlmjawmtew.top
agvlmjawmzew.top
agvlmjawmzex.top
agvlmtkxmjuy.top
agvlmtkxmtq2.top
agvlmtkxmtq4.top
agvlmtkxmtq5.top
agvlmtkxmtuw.top
agvlmtkxmtux.top
agvlmtkxmtuy.top
ahmwmtkxmtq2.top
amq1mtkxmtq2.top
bxfmmtkxmtq2.top
ehuxmtkxmtq2.top
ehuxmtkxmtq3.top
rkeinsustries.com

# Reference: https://app.any.run/tasks/fb7c57f9-6218-42f2-bd5f-977b7b293fea/

whoisyourhero.com

# Reference: https://twitter.com/reecdeep/status/1234410379201187840

guthriebiblebaptistchurch.com
siemtools.com
tribalalpha.com

# Reference: https://twitter.com/luc4m/status/1241000563262853121

carlaarrabito.it

# Reference: https://twitter.com/JAMESWT_MHT/status/1241007134109831169
# Reference: https://app.any.run/tasks/531ca9d6-c9b6-4c82-8cfe-1c3fa50534cb/

mgm.perc-up.com
tetto.carlaarrabitoarchitetto.it

# Reference: https://twitter.com/reecdeep/status/1244574825659711491

jasonrsheldon.com
vertexadvising.com

# Reference: https://twitter.com/malware_traffic/status/1245854180134141952

chrishenel.com

{'fraction_non_alphanumeric': 0.11186572232463374, 'fraction_numerical': 0.14446492674881148, 'mean_word_length': 5.862849533954727, 'pattern_counts': {'":': 0, '<': 3, '<?xml version=': 0, '>': 3, 'https://': 87, 'lorem ipsum': 0, 'www.': 14, 'xml': 0}, 'pii_count': 6, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '3607357', 'n_tokens_mistral': 5185, 'n_tokens_neox': 4313, 'n_words': 402}