← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Executed • Installend RMS Module | .exe RMS.exe
WHITE Q.Vashti 2025-09-20 Modified: 2025-10-20
4150
IOCs
HIGH VOLUME
Recap: Executed in Denver, Co.USA. Attacked a Newly purchased iPhone. Multi person attempt . Attacker executed via watch. . Related to Trump campaign Palantir text linked in references. CyberInt states that Remote Manipulator System (RMS) is a legitimate tool developed by Russian organization TektonIT and has been observed in campaigns conducted by TA505 as well as numerous smaller campaigns likely attributable to other, disparate, threat actors. In addition to the availability of commercial licenses, the tool is free for non-commercial use and supports the remote administration of both Microsoft Windows and Android devices. Creation Date 2023-05-01 00:28:45 Last Modification Date 2025-09-13 22:34:36 - by CarlosCabal (VirusTotal) Interesting. Being used in America.
lowfitektonit yarapulses otxpexepe32intelvendor findingms defendernumberinstallinstallendigorpavlovremote access tooldynamicloadermediumdynamicip addressdomainfile namereadswindowscheckspehash externalrmsrms moduleprivate buildwatchmsiewindows ntwow64slcc2media centerportdestinationsearchunitedread cwritepersistenceexecutionmalwarepushcopynextautorununknownskykitcompanynameinstadodudp a83f8110encodinge1203 windowsfile attributescatalog treeanalysis ob0001analysis ob0002f0002 pollingcontrol ob0004access ob0005defense evasionextractiondata uploadfailedrelated truunit dataincluded reviewiocssuggestedloesfind sutype oextrreferences trycat antiviruscom tektonitoriginal fmatch infoadversariesmatch unknown30000sinfoinfo checkstaskjob t1053execution flowt1574 dllwindowtulachyarahallrenderappleios114.114.114.114targetedmonitoringbrian sabey & cotsara brashears targetangry quasipp mafiadangerousredrumnemtih
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
#Lowfi:HSTR:MonitoringTool:TektonIt Win.Trojan.Remoteadmin-151 Win.Trojan.Rfusclient Tulach TrojanDownloader:HTML/Adodb.gen!A
Indicators of Compromise (659 / 4150 total)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL domain hostname SSLCertFingerprint email
TYPEINDICATORDESCRIPTIONCREATED
URL http://6.0.0.0 — 2025-09-20
URL http://1.0.0.0 — 2025-09-20
URL http://ns.adobe.com/exif/1.0/ — 2025-09-20
URL http://ns.adobe.com/photoshop/1.0/ — 2025-09-20
URL http://ns.adobe.com/xap/1.0/ — 2025-09-20
URL http://ns.adobe.com/xap/1.0/mm/ — 2025-09-20
URL http://ns.adobe.com/xap/1.0/sType/ResourceRef — 2025-09-20
URL http://purl.org/dc/elements/1.1/ — 2025-09-20
URL http://www.w3.org/1999/02/22-rdf-syntax-ns — 2025-09-20
URL http://ns.Adobe.com/air/application/1.5.2 — 2025-09-20
URL http://ns.Adobe.com/xap/1.0/mm/ — 2025-09-20
URL http://ns.aDobe.com/tiff/1.0/b — 2025-09-20
URL http://ns.aDobe.com/xap/1. — 2025-09-20
URL http://ns.aDobe.com/xap/1.0 — 2025-09-20
URL http://ns.aDobe.com/xat/1.0 — 2025-09-20
URL http://ns.aDobe.com/xat/1.0/ — 2025-09-20
URL http://ns.adObe.com/8ap/1.0/ — 2025-09-20
URL http://ns.adObe.com/thff/1.0/ — 2025-09-20
URL http://ns.adObe.com/xap/1.0/ — 2025-09-20
URL http://ns.adoBe.com/exif — 2025-09-20
URL http://ns.adoBe.com/xap/1.0/ — 2025-09-20
URL http://ns.adoBe.com/xap/1.0/mm/ — 2025-09-20
URL http://ns.adoBe.com/xar/1.0/mM/ — 2025-09-20
URL http://ns.adobe.Com/xap/ — 2025-09-20
URL http://ns.adobe.Com/xap/1.0/mm/ — 2025-09-20
URL http://ns.adobe.Com/xap/1.0/sType/ — 2025-09-20
URL http://ns.adobe.cOm/ — 2025-09-20
URL http://ns.adobe.coM/xap/1.0/mm/ — 2025-09-20
URL http://ns.adobe.coM/xap/1.0/mmY — 2025-09-20
URL http://8e1f8f16bff5ef7d5413e0489a4b1ae4.rqmetrixsdn.info/ — 2025-09-20
URL https://e811310a04a5370b2ea33f7106885508.rqmetrixsdn.info/ — 2025-09-20
URL https://e8824f247333d03d4c065bb6aa5e7043.rqmetrixsdn.info/ — 2025-09-20
URL https://eb00539a3d48c2c6b0fdbc1cf5b55ed4.rqmetrixsdn.info/ — 2025-09-20
URL https://eb3338bea547f22ad9ea345908e166c6.rqmetrixsdn.info/ — 2025-09-20
URL https://ebf749717ef6caba277d6eaca30ed6cd.rqmetrixsdn.info/ — 2025-09-20
URL https://ec736f4cad3e997befd842c208820273.rqmetrixsdn.info/ — 2025-09-20
URL https://ede21d70f3a59eef60e74094dedcd575.rqmetrixsdn.info/ — 2025-09-20
URL https://ef37dbb3b02e88e869d18e6fb8f26189.rqmetrixsdn.info/ — 2025-09-20
URL https://ef4d2ded561d678700ca45c6648c975c.rqmetrixsdn.info/ — 2025-09-20
URL https://f0c0cb760c5497cb10a6050ae10bf136.rqmetrixsdn.info/ — 2025-09-20
URL https://f25e3c7792dfdcf8f223e6777c38cab9.rqmetrixsdn.info/ — 2025-09-20
URL https://f343f88178e4d767d5df96d3ae895680.rqmetrixsdn.info/ — 2025-09-20
URL https://f74c2ed76f1c3c84b461c539e1b80b3b.rqmetrixsdn.info/ — 2025-09-20
URL https://f963bfdfcb7bf53324df50f64999f0d8.rqmetrixsdn.info/ — 2025-09-20
URL https://fa1203f083c374f8111f031217716c3f.rqmetrixsdn.info/ — 2025-09-20
URL https://fbb8ad46037fca990d3b2334d26f2237.rqmetrixsdn.info/ — 2025-09-20
URL https://fea16cb0a5e06e7be52acce30ed771e3.rqmetrixsdn.info/ — 2025-09-20
URL https://fec3da19b9b651e5b6afb3b75fa66cd9.rqmetrixsdn.info/ — 2025-09-20
URL https://ff389dcc1d84c19e7cdd8f45d92678d1.rqmetrixsdn.info/ — 2025-09-20
URL http://204.68.111.100 — 2025-09-20
URL http://eduke32.com/ — 2025-09-20
URL http://eduke32.com/button.png — 2025-09-20
URL http://eduke32.com/classic.css — 2025-09-20
URL http://eduke32.com/favicon.ico — 2025-09-20
URL http://eduke32.com/images/bgl.jpg — 2025-09-20
URL http://eduke32.com/images/bgl_classic.jpg — 2025-09-20
URL http://eduke32.com/images/donation.png — 2025-09-20
URL http://eduke32.com/images/download.png — 2025-09-20
URL http://eduke32.com/images/dukefire.png — 2025-09-20
URL http://eduke32.com/images/eduke32_classic.png — 2025-09-20
URL http://eduke32.com/images/shots/duke3d_2.tn.jpg — 2025-09-20
URL http://eduke32.com/images/shots/duke3d_3.tn.jpg — 2025-09-20
URL http://eduke32.com/images/shots/polymer.tn.jpg — 2025-09-20
URL http://eduke32.com/images/shots/polymer2.tn.jpg — 2025-09-20
URL http://eduke32.com/images/sitebanner_classic.jpg — 2025-09-20
URL http://eduke32.com/roundies.js 1dc2505cdc71158829d63abc16cbe9f3ef884279460095446ce99e355dea6c72 2025-09-20
URL http://eduke32.com/sitebutton.png — 2025-09-20
URL http://blog.jpcert.or.jp/2016/01/windows-commands-abused-by-attackers.html — 2025-09-20
URL http://eduke32.sourceforge.net — 2025-09-20
URL http://eduke32.sourceforge.net/ — 2025-09-20
URL http://eduke32.sourceforge.net/VERSION — 2025-09-20
URL http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTPJvUY%2Bsl%2Bj4yzQuAcL2oQno5fCgQUUWj%2FkK8CB3U8zNllZGKiErhZcjsCEA2AX74PnISVkQqbCbigXM8%3D — 2025-09-20
URL http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTfqhLjKLEJQZPin0KCzkdAQpVYowQUsT7DaQP4v0cB1JgmGggC72NkK8MCEATh56TcXPLzbcArQrhdFZ8%3D — 2025-09-20
URL http://s7.addthis.com/js/250/addthis_widget.js — 2025-09-20
URL http://www.bing.com/favicon.ico — 2025-09-20
URL http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab — 2025-09-20
URL http://www.facebook.com/plugins/like.php?app_id=146717255403874&href=http://www.facebook.com%2Feduke32&send=false&layout=standard&width=256&show_faces=false&action=like&colorscheme=light&font&height=80 — 2025-09-20
URL http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt — 2025-09-20
URL https://static.xx.fbcdn.net/rsrc.php/v3/yD/r/FEppCFCt76d.png — 2025-09-20
URL https://static.xx.fbcdn.net/rsrc.php/v3i7244/ya/l/en_GB/rRpXxSZEgLd.js?_nc_x=Ij3Wp8lg5Kz — 2025-09-20
URL https://www.facebook.com/plugins/like.php?app_id=146717255403874&href=http%3A%2F%2Fwww.facebook.com%2Feduke32&send=false&layout=standard&width=256&show_faces=false&action=like&colorscheme=light&font&height=80 — 2025-09-20
URL https://www.virusbtn.com/virusbulletin/archive/2015/09/vb201509-custom-packer.dkb — 2025-09-20
URL http://www.endgame.com/blog/technical-blog/ten-process-injection-techniques-technical-survey-common-and-trending-process — 2025-09-20
URL http://online.dmec.org/e/123092/-twitter-addthis-unique-lng-en/vhkv5d/1273957019?h=70_aD8x2MxBtVEfk5KHiZ9USOBYf1KJJAzm8L193aw4 — 2025-09-20
URL http://online.dmec.org/e/123092/facebook-addthis-unique-lng-en/vhkv5l/1273957019?h=70_aD8x2MxBtVEfk5KHiZ9USOBYf1KJJAzm8L193aw4 — 2025-09-20
URL http://online.dmec.org/e/123092/kmark-php-v-250-addthis-unique/vhkv5p/1273957019?h=70_aD8x2MxBtVEfk5KHiZ9USOBYf1KJJAzm8L193aw4 — 2025-09-20
URL http://online.dmec.org/e/123092/linkedin-addthis-unique-lng-en/vhkv5h/1273957019?h=70_aD8x2MxBtVEfk5KHiZ9USOBYf1KJJAzm8L193aw4 — 2025-09-20
URL http://altvr.net — 2025-09-20
URL https://172.96.137.159 — 2025-09-20
URL https://checkpoint.url-protection.com/v1/url?o=https://www.microsoft.com/&g=OTA0OThjZWE5YTEyYjFiMA==&h=MmMzMDgwOTUzNDljYmVhZDcxNjA0N2E4YzRmMjMxYTI4MTkzNDBhMGYxM2Q0MDQ4NDUwZWYwM2EyMjk1ZGUwNg==&p=Y3AxZTphaGxpdW5pdGVkYmFuazpjOm86NTg5MzE5OTkzMTljYzFlZmQ4ZTg3Njc5ZWM2NjMwY2I6djE6aDpU — 2025-09-20
URL https://contoso.com/adfs — 2025-09-20
URL http://ccorner.duke4.net/tutorials-index/adobe-photoshop/colorizing-and-remapping-with-gradient-maps/ — 2025-09-20
URL http://dukeworld.com/telefragged/earthquake/ — 2025-09-20
URL http://dukeworld.com/telefragged/mindkiller/ — 2025-09-20
URL http://dukeworld.duke4.net/classic dukeworld/tc/prayers/ — 2025-09-20
URL http://starwars.dukeworld.com/ — 2025-09-20
URL http://www.dukertcm.com/knowledge-base/downloads-rtcm/src-tekwar-source/ — 2025-09-20
URL https://dukeworld.com/eduke32/synthesis/latest/eduke32_win64_20250813-10626-126f35ca8.7z — 2025-09-20
URL https://dukeworld.duke4.net/eduke32/ — 2025-09-20
URL https://dukeworld.duke4.net/eduke32/old_versions/eduke32-1.3.0rc0.exe — 2025-09-20
URL https://dukeworld.duke4.net/eduke32/old_versions/eduke32_snapshot_20060520.zip — 2025-09-20
URL https://dukeworld.duke4.net/eduke32/old_versions/eduke32_snapshot_20070323.zip — 2025-09-20
URL https://dukeworld.duke4.net/eduke32/old_versions/eduke32_snapshot_20070422.zip — 2025-09-20
URL https://dukeworld.duke4.net/eduke32/old_versions/eduke32_snapshot_20070828.zip — 2025-09-20
URL https://dukeworld.duke4.net/eduke32/old_versions/eduke32_snapshot_20080702.zip — 2025-09-20
URL https://eduke32.com/ — 2025-09-20
URL https://forums.duke4.net/topic/1367-eduke32-surround-soundeax/ — 2025-09-20
URL https://forums.duke4.net/topic/9111-return-to-ruins-a-new-powerslave-exhumed-mini-episode-and-mapping-documentation/ — 2025-09-20
URL https://msdn.duke4.net/revbioshock1.jpg — 2025-09-20
URL https://sc55.duke4.net/ — 2025-09-20
URL https://wiki.eduke32.com/wiki/Installation_Guide_for_Official_Add-ons — 2025-09-20
URL http://67.24.73.254/32 — 2025-09-20
URL http://67.24.73.254/eamaster/s/shift/the_sims/the_sims_4/fg__ww_us/the_sims_4pcfg__ww_usbeta_1566__pcbgmlrprodretaildip_134181020c9e5b0ffd809459aaa03191e247f733c.zi — 2025-09-20
URL http://dukeworld.com/2001-current/source/jonof/jfduke3d-20050216-setup.exe — 2025-09-20
URL http://dukeworld.com/eduke32/mac/ — 2025-09-20
URL http://dukeworld.com/eduke32/old_versions/ — 2025-09-20
URL http://dukeworld.com/eduke32/oldmp/ — 2025-09-20
URL http://dukeworld.com/eduke32/synthesis/ — 2025-09-20
URL http://dukeworld.com/eduke32/tools/ — 2025-09-20
URL http://dukeworld.com/eduke32/wii/ — 2025-09-20
URL http://dukeworld.com/telefragged/420/Adam Sandler — 2025-09-20
URL http://dukeworld.com/telefragged/420/Adam Sandler - Having Sex Or Working Out.mp3 — 2025-09-20
URL http://dukeworld.com/telefragged/420/medievil_ents.zip — 2025-09-20
URL http://dukeworld.com/telefragged/420/medievil_pre81.zip — 2025-09-20
URL http://dukeworld.com/telefragged/420/medievil_tab.zip — 2025-09-20
URL https://dukeworld.com/2001-current/demos/ — 2025-09-20
URL https://dukeworld.com/2001-current/rtcm/ — 2025-09-20
URL https://dukeworld.com/2001-current/tc/ — 2025-09-20
URL https://dukeworld.com/2001-current/unsorted/ — 2025-09-20
URL https://dukeworld.com/eduke32/synthesis/20250704-10623-388752735/eduke32_win64_20250704-10623-388752735.7z — 2025-09-20
URL https://dukeworld.com/eduke32/synthesis/latest/ — 2025-09-20
URL http://hspell.ivrix.org.il/f — 2025-09-20
URL http://www.eurephia.net/e — 2025-09-20
URL http://www.foray.org/app/using/configuration.html — 2025-09-20
URL http://www.gltron.org — 2025-09-20
URL http://www.jgroups.org/javagroupsnew/docs/index.html — 2025-09-20
URL http://www.jgroups.org/manual-3.x/html/index.html — 2025-09-20
URL http://www.jgroups.org/schema/JGroups-4.0.xsd — 2025-09-20
URL http://www.libexpat.org/f — 2025-09-20
URL http://www.openantivirus.org/projects.php — 2025-09-20
URL http://www.phpgedview.net — 2025-09-20
URL http://www.slashem.org/ — 2025-09-20
URL http://www.tutos.org/homepage/product.html — 2025-09-20
URL http://www.vrmoo.org/ — 2025-09-20
URL http://cdn-cn.dns-dynamic.net — 2025-09-20
URL http://cheuo.online — 2025-09-20
URL http://ivyth.ink — 2025-09-20
URL http://sell4smart.com — 2025-09-20
URL http://ts1.cn.mm.bing.net.lxcvc.com — 2025-09-20
URL https://cdn-cn.dns-dynamic.net — 2025-09-20
URL https://cheuo.online — 2025-09-20
URL https://cheuo.online/ — 2025-09-20
URL https://ivyth.ink — 2025-09-20
URL https://l3d.cn/ — 2025-09-20
URL https://s1.cn.bing.net.bscedge.com — 2025-09-20
URL https://s1.cn.bing.net.bscedge.com/ — 2025-09-20
URL http://www.eduke32.com/images/shots/polymer2.jpg — 2025-09-20
URL https://wiki.eduke32.com/wiki/Download_EDuke32 — 2025-09-20
URL https://wiki.eduke32.com/wiki/NetDuke32 — 2025-09-20
URL https://wiki.eduke32.com/wiki/Utilities — 2025-09-20
URL https://online-essex.co.uk/c/AQjLkxIQpMV_GK3ima8BIPux_xxVUU9wFmd4IBHyj3W83yk7XX7a9fsGwTtyQhttF2A89g — 2025-09-20
URL http://nukeykt.retrohost.net/ — 2025-09-20
URL http://sc-d70.retrohost.net/howtouse.html — 2025-09-20
URL https://nukeykt.retrohost.net/ — 2025-09-20
URL http://www.bhashaindia.com/ilit/Marathi.aspx — 2025-09-20
URL https://email.btobinsights.com/c/1LHxzmKBeu9WfQkFBqyYyElefIKZm — 2025-09-20
URL http://cheuo.online/ — 2025-09-20
URL http://copilotinternal.com/ — 2025-09-20
URL http://httk2024.top/ — 2025-09-20
URL http://l3d.cn/ — 2025-09-20
URL http://msedgeservices.com — 2025-09-20
URL http://s1.cn.bing.net.bscedge.com — 2025-09-20
URL http://v.bingsearch.com — 2025-09-20
URL http://v.bingsearch.com/ — 2025-09-20
URL https://bingsearch.com — 2025-09-20
URL https://copilotinternal.com/ — 2025-09-20
URL https://dict.bing.com.cn/api/ — 2025-09-20
URL https://msedgeservices.com — 2025-09-20
URL https://msedgeservices.com/ — 2025-09-20
URL https://v.bingsearch.com — 2025-09-20
URL http://rmansys.ru/F/ — 2025-09-20
URL http://rmansys.ru/Z/ — 2025-09-20
URL http://rmansys.ru/b/ — 2025-09-20
URL http://rmansys.ru/hostcmsfiles/js/df7e7699a868e4ed792c3ed93a349403.js — 2025-09-20
URL http://rmansys.ru/images/my/bg_body.svg — 2025-09-20
URL http://rmansys.ru/images/my/features/active-directory.svg — 2025-09-20
URL http://rmansys.ru/images/my/features/certificate.svg — 2025-09-20
URL http://rmansys.ru/images/my/features/distr-configurator.svg — 2025-09-20
URL http://rmansys.ru/images/my/features/server.svg — 2025-09-20
URL http://rmansys.ru/images/my/features/view.svg — 2025-09-20
URL http://rmansys.ru/images/my/icons/rms_blue-32.svg — 2025-09-20
URL http://rmansys.ru/images/my/security-shield.svg — 2025-09-20
URL http://rmansys.ru/images/my/speed.svg — 2025-09-20
URL http://rmansys.ru/js/jquery-3.6.0.min.js — 2025-09-20
URL http://rmansys.ru/landkit/assets/css/theme.bundle.css — 2025-09-20
URL http://rmansys.ru/landkit/assets/js/theme.bundle.js — 2025-09-20
URL http://rmansys.ru/landkit/assets/js/vendor.bundle.js — 2025-09-20
URL http://rmansys.ru/top/ — 2025-09-20
URL http://rmansys.ru/uppor/ — 2025-09-20
URL https://rmansys.ru/IS_PROGMSG_TEXTFILECHANGS_REPLACECE9CB0FF89BBC73FAEAC37FF5ECC978FDEEBF08FCEDCE03FCEFB97CFBEECA788A9CBD00FE9ACDWUS — 2025-09-20
URL http://4.0.0.0 — 2025-09-20
URL http://5.1.0.0 — 2025-09-20
URL http://7.0.0.0 — 2025-09-20
URL http://rms-server.tektonit.ru:563/ — 2025-09-20
URL http://rms-server.tektonit.ru:5655/ — 2025-09-20
URL http://learning.dmec.org — 2025-09-20
URL http://online.dmec.org/e/123092/2024-04-04/z1vpdj/1454044518/h/ceh8v39w8einvyibzzsoratnvfjmrqpf-zz7rco0tdc — 2025-09-20
URL http://online.dmec.org/e/123092/2024-04-04/z1vpdj/1454048535/h/inwfj06ku-x3fu3nx_t8mvcsaqnhh9gykk0kc6-jxxm — 2025-09-20
URL http://online.dmec.org/webmail/123092/1400353843/d30bc152e8d9bce22b44a5930adb55dbad635e41c39f01cf981e99f9cc3e2535 — 2025-09-20
URL http://online.dmec.org/webmail/123092/1400396761/0641e41d175230242f801d69f1ea61385946cf4b1593ce24dbeaa505c8ed969c — 2025-09-20
URL http://online.dmec.org/webmail/123092/1406444007/a1545618ef3481ec3b8fc9ff7c46c8b6070042948a7b77973008a1d4c19befd1> — 2025-09-20
URL http://online.dmec.org/webmail/123092/1407424020/19310638879188d28f7a6c0c44bc5471c2e4786fd8d5287f4333619ece32cb42 — 2025-09-20
URL http://online.dmec.org/webmail/123092/1417597938/7ad813517c3202039afa7ea823cb2ba3b8efc552d78ce430840e7b02f87ff626 — 2025-09-20
URL https://dmec.org/conferences — 2025-09-20
URL https://dmec.org/conferences-and-events/annual-conference/agenda/ — 2025-09-20
URL https://dmec.org/conferences-and-webinars/compliance-conference-2/ — 2025-09-20
URL https://dmec.org/conferences-and-webinars/webinars/ — 2025-09-20
URL https://dmec.org/membership/company-affiliations-membership-status-check/ — 2025-09-20
URL https://dmec.org/wp-content/uploads/2025-DMEC-Sponsorship-Exhibit-and-Advertising-Prospectus-1.pdf — 2025-09-20
URL https://jobs.dmec.org/sign-in — 2025-09-20
URL https://learning.dmec.org — 2025-09-20
URL https://learning.dmec.org/my-continuing-education — 2025-09-20
URL https://myaccount.dmec.org/s/ — 2025-09-20
URL https://myaccount.dmec.org/s/question/0D5UH00000BdtO80AJ/we-are-looking-for-ideas-of-how-other-employers-send-fmla-paperwork-is-it-required-to-send-them-with-a-proof-of-mailing-andor-certified-mail — 2025-09-20
URL https://www.dmec.org/ — 2025-09-20
URL http://rmansys.ru/ — 2025-09-20
URL http://rmansys.ru/. — 2025-09-20
URL http://rmansys.ru/IS_PREVENT_DOWNGRADE_EXITZ_DOWNGRADE_DETECTED;Z_UPGRADE_DETECTED;COMPANYNAME;INSTA — 2025-09-20
URL http://rmansys.ru/a — 2025-09-20
URL http://rmansys.ru/i6 — 2025-09-20
URL http://rmansys.ru/internet-id/ — 2025-09-20
URL http://rmansys.ru/pf — 2025-09-20
URL http://rmansys.ru/pf_ — 2025-09-20
URL http://rmansys.ru/pfx — 2025-09-20
URL http://rmansys.ru/utils/inet_id_notify.php — 2025-09-20
URL http://rmansys.ru/utils/inet_id_notify.php?test=1U — 2025-09-20
URL http://rmansys.ru/web-help/ — 2025-09-20
URL http://rmansys.ru/web-help/ge — 2025-09-20
URL http://rmansys.ru/web-help/pf — 2025-09-20
URL http://rmansys.ru/web-help/pf_ — 2025-09-20
URL http://rmansys.ru/web-help/pfx — 2025-09-20
URL http://crl.thawte.com/ThawteTimestampingCA.crl0 — 2025-09-20
URL http://ts-aia.ws.symantec.com/tss-ca-g2.cer0 — 2025-09-20
URL http://ts-crl.ws.symantec.com/tss-ca-g2.crl0 — 2025-09-20
URL http://www.indyproject.org/ — 2025-09-20
URL http://acctestss-250901063300489671.contoso.com — 2025-09-20
URL http://acctestss-250903062211422658.contoso.com — 2025-09-20
URL http://acctestss-250907043327138743.contoso.com/ — 2025-09-20
URL http://acctestss-250909041804813036.contoso.com/ — 2025-09-20
URL https://apideveloper.santander.cl/sancl/partner/transaction_authorization/v1/coordinate_card/acs/mc/challenge/brw/do/210/dd14d159 — 2025-09-20
URL https://apideveloper.santander.cl/sancl/partner/transaction_authorization/v1/coordinate_card/acs/visa/challenge/brw/get/210/d5caee55-c7ae-4b3a-8be7-b65fa5f885c9 — 2025-09-20
URL https://apideveloper.santander.cl/sancl/partner/transaction_authorization/v1/coordinate_card/acs/visa/challenge/brw/get/220/6b180faa-7ce7-4e26-a3b0-aa241497c70f — 2025-09-20
URL https://apiter.santander.cl/fueradelinea/ — 2025-09-20
URL https://apiper.santander.cl/appper/SofToken/Facade/eliminacionToken — 2025-09-20
URL https://apiper.santander.cl/appper/SofToken/Facade/informacionCliente — 2025-09-20
URL https://apiper.santander.cl/appper/facade/CalcularNegatividad — 2025-09-20
URL https://apiper.santander.cl/appper/facade/ConsultaSaldo — 2025-09-20
URL https://apiper.santander.cl/appper/facade/CruceProductoHipotecario — 2025-09-20
URL https://apiper.santander.cl/appper/facade/CuentasDisponibles — 2025-09-20
URL https://apiper.santander.cl/appper/facade/Inversiones — 2025-09-20
URL https://apiper.santander.cl/appper/facade/Inversiones/ConsultaDatosCliente — 2025-09-20
URL https://apiper.santander.cl/appper/facade/PagoEnLinea/PagoCarro — 2025-09-20
URL https://apiper.santander.cl/appper/facade/RecargaCelular/DatosRecarga — 2025-09-20
URL https://apiper.santander.cl/appper/facade/RecargaCelular/ValidaCelular — 2025-09-20
URL https://apiper.santander.cl/appper/facade/ReclamosSAC/Encuesta — 2025-09-20
URL https://apiper.santander.cl/appper/facade/ReclamosSAC/Ingreso — 2025-09-20
URL https://apiper.santander.cl/appper/facade/ServiciosUsuario/ — 2025-09-20
URL https://apiper.santander.cl/appper/facade/SuperGiro/Verifica — 2025-09-20
URL https://apiper.santander.cl/appper/facade/Transferencias/EliminaDestinatarioFrecuente — 2025-09-20
URL https://apiper.santander.cl/appper/facade/UltCartolaHistorica — 2025-09-20
URL https://sst.santander.cl/fueradelinea/ — 2025-09-20
URL http://cp.url-protection.com/ — 2025-09-20
URL http://password-protected.url-protection.com — 2025-09-20
URL http://password-protected.url-protection.com/ — 2025-09-20
URL http://sonicwall.url-protection.com — 2025-09-20
URL https://avanan.url-protection.com/ — 2025-09-20
URL https://avanan.url-protection.com/v1/r01/url — 2025-09-20
URL https://avanan.url-protection.com/v1/r02/url — 2025-09-20
URL https://avanan.url-protection.com/v1/url — 2025-09-20
URL https://checkpoint.url-protection.com/ — 2025-09-20
URL https://checkpoint.url-protection.com/v1 — 2025-09-20
URL https://checkpoint.url-protection.com/v1/ — 2025-09-20
URL https://checkpoint.url-protection.com/v1/r01/url — 2025-09-20
URL https://checkpoint.url-protection.com/v1/r02= — 2025-09-20
URL https://checkpoint.url-protection.com/v1/r07/url — 2025-09-20
URL https://checkpoint.url-protection.com/v= — 2025-09-20
URL https://password-protected.url-protection.com — 2025-09-20
URL https://password-protected.url-protection.com/ — 2025-09-20
URL https://sonicwall.url-protection.com — 2025-09-20
URL https://sonicwall.url-protection.com/ — 2025-09-20
URL http://acctestss-250911042725513444.contoso.com/ — 2025-09-20
URL http://acctestss-250912120504254000.contoso.com/ — 2025-09-20
URL http://acctestss-250912120531415327.contoso.com/ — 2025-09-20
URL http://acctestss-250914042838518591.contoso.com/ — 2025-09-20
URL http://acctestss-250914042845951922.contoso.com/ — 2025-09-20
URL http://acctestss-250915064052106832.contoso.com/ — 2025-09-20
URL http://acctestss-250915064140174454.contoso.com/ — 2025-09-20
URL http://acctestss-250917062425654851.contoso.com/ — 2025-09-20
URL http://acctestss-250917062501637254.contoso.com/ — 2025-09-20
URL http://acctestss-250918042758360485.contoso.com/ — 2025-09-20
URL http://bamboohr.contoso.com — 2025-09-20
URL http://frontend.contoso.com/ — 2025-09-20
URL http://msdcs.contoso.com/ — 2025-09-20
URL https://acctestss-250901063300489671.contoso.com — 2025-09-20
URL https://acctestss-250903062211422658.contoso.com — 2025-09-20
URL https://bamboohr.contoso.com — 2025-09-20
URL http://ccorner.duke4.net/tutorials — 2025-09-20
URL https://ccorner.duke4.net/good-looking-old-games-amiga-first-person-shooters/ — 2025-09-20
URL http://duke4.org/files/nightfright/hrp/dn3d_hrp54-sfx.exe — 2025-09-20
URL http://www.duke4.org/files/nightfright/hrp/dn3d_hrp53-sfx.exe — 2025-09-20
URL http://www.duke4.org/files/nightfright/hrp/dn3d_hrp54-sfx.exe — 2025-09-20
URL http://www.duke4.org/files/nightfright/hrp/duke3d_hrp.zip — 2025-09-20
URL http://www.duke4.org/files/nightfright/misc/eduke32_addons.exe — 2025-09-20
URL http://www.duke4.org/files/nightfright/related/duke3d_xxx.zip — 2025-09-20
URL http://sjzbwet.duke4.net/jShAvCSy/no-cache — 2025-09-20
URL https://dukeworld.duke4.net/classic dukeworld/maps/p-t/penthous.zip — 2025-09-20
URL https://dukeworld.duke4.net/eduke32/old_versions/ — 2025-09-20
URL https://dukeworld.duke4.net/eduke32/old_versions/eduke32_snapshot_20080928.zip — 2025-09-20
URL https://forum.duke4.net/ — 2025-09-20
URL https://m210.duke4.net/index.php/download — 2025-09-20
URL https://m210.duke4.net/index.php/downloads/download/9-gdxpacks/61-duke-nukem-3d-nude-patch — 2025-09-20
URL https://msdn.duke4.net/mods.php — 2025-09-20
URL https://taw.duke4.net/doom2_fistful11.jpg — 2025-09-20
URL http://hrp.duke4.net/download.php — 2025-09-20
URL http://hrp.duke4.net/media.php — 2025-09-20
URL http://hrp.duke4.net/screens/ep1/e1l1_01.jpg — 2025-09-20
URL http://hrp.duke4.net/screens/ep1/e1l2_02.jpg — 2025-09-20
URL http://sc55.duke4.net/games.php — 2025-09-20
URL http://sc55.duke4.net/history.ph — 2025-09-20
URL https://sc55.duke4.net/games.php — 2025-09-20
URL http://archive.dukertcm.com/knowledge-base/downloads-rtcm/duke3d-tools-editart/bastART.zip — 2025-09-20
URL http://archive.dukertcm.com/knowledge-base/downloads-rtcm/duke3d-tools-editart/dukeresART.zip — 2025-09-20
URL http://deeperthought.dukertcm.com/ — 2025-09-20
URL http://dukertcm.com/images/redneckrampage/ra/E1L2B — 2025-09-20
URL http://dukertcm.com/knowledge-base/build-games/redneck-rampage.html — 2025-09-20
URL http://dukertcm.com/knowledge-base/downloads-rtcm/blood-patchs/r1120.exe — 2025-09-20
URL http://dukertcm.com/knowledge-base/downloads-rtcm/blood-shareware/blood1.11sw.exe — 2025-09-20
URL http://dukertcm.com/knowledge-base/downloads-rtcm/duke3d-cons/expander.exe — 2025-09-20
URL http://dukertcm.com/knowledge-base/downloads-rtcm/duke3d-cons/holoweap.exe — 2025-09-20
URL http://dukertcm.com/knowledge-base/downloads-rtcm/duke3d-cons/lizman.exe — 2025-09-20
URL http://dukertcm.com/knowledge-base/downloads-rtcm/duke3d-cons/sobbotpp.exe — 2025-09-20
URL http://dukertcm.com/knowledge-base/downloads-rtcm/duke3d-patchs/ — 2025-09-20
URL http://dukertcm.com/knowledge-base/downloads-rtcm/duke3d-tools-editart/ — 2025-09-20
URL http://dukertcm.com/knowledge-base/downloads-rtcm/duke3d-tools-editart/bastART.zip — 2025-09-20
URL http://dukertcm.com/knowledge-base/downloads-rtcm/general-multiplay-drivers/gprsetup.exe — 2025-09-20
URL http://dukertcm.com/knowledge-base/downloads-rtcm/src-eduke32-tools/index.htm — 2025-09-20
URL http://www.dukertcm.com/ — 2025-09-20
URL https://deeperthought.dukertcm.com/ — 2025-09-20
URL http://dukemanager.dukeworld.com/faq.html — 2025-09-20
URL http://hspell.ivrix.org.il/ — 2025-09-20
URL https://hspell.ivrix.org.il/ — 2025-09-20
URL http://gltron.org/artpacks.ph — 2025-09-20
URL http://gltron.org/download.ph — 2025-09-20
URL http://www.gltron.org/stuff/gltron-0.71-beta-1005-1.exe — 2025-09-20
URL http://www.foray.org/dtds/0.1/en/foray-config.dtd — 2025-09-20
URL http://gphoto.com/links — 2025-09-20
URL http://mail.libexpat.org — 2025-09-20
URL http://mail.libexpat.org/mailman/listinfo — 2025-09-20
URL http://mail.libexpat.org/mailman/listinfo/ — 2025-09-20
URL http://www.libexpat.org — 2025-09-20
URL http://www.libexpat.org/ — 2025-09-20
URL http://www.libexpat.org/. — 2025-09-20
URL http://www.libexpat.org/Expat — 2025-09-20
URL https://mail.libexpat.org — 2025-09-20
URL https://www.libexpat.org — 2025-09-20
URL http://jgroups.org/Perftest.html — 2025-09-20
URL http://jgroups.org/javadoc/org/jgroups/util/StackType.html — 2025-09-20
URL http://jgroups.org/manual/index.html — 2025-09-20
URL http://jgroups.org/perf/perf2007/6/ — 2025-09-20
URL http://www.jgroups.org/ — 2025-09-20
URL http://www.jgroups.org/javadoc/org/jgroups/protocols/pbcast/GMS.htm — 2025-09-20
URL http://www.jgroups.org/javadoc5/org/jgroups/View.html — 2025-09-20
URL http://www.jgroups.org/manual-3.x/html/user-building-blocks.html — 2025-09-20
URL http://www.jgroups.org/schema/JGroups-3.0.xsd — 2025-09-20
URL https://www.jgroups.org/ — 2025-09-20
URL http://jasypt.org/api/jasypt/1.8/org/jasypt/spring/properties/EncryptablePropertyPlaceholderConfigurer.html — 2025-09-20
URL http://www.jasypt.org — 2025-09-20
URL http://www.jasypt.org/ — 2025-09-20
URL http://www.jasypt.org/changelogs/jasypt/ChangeLog.txt — 2025-09-20
URL http://www.jasypt.org/cli.html — 2025-09-20
URL http://www.jasypt.org/download.html — 2025-09-20
URL http://www.jasypt.org/encrypting — 2025-09-20
URL http://www.jasypt.org/favicon.ico — 2025-09-20
URL http://www.jasypt.org/howtoencryptuserpasswords.html — 2025-09-20
URL http://www.jasypt.org/license.html — 2025-09-20
URL http://www.jasypt.org/schema/encryption/jasypt-spring31-encryption-1.xsd — 2025-09-20
URL http://www.jasypt.org/schema/encryption/jasypt-spring4-encryption-1.xsd — 2025-09-20
URL http://mac.linux-m68k.org/docs/faq.php — 2025-09-20
URL http://104.71.214.69:80 — 2025-09-20
URL http://114.114.114.114:53 — 2025-09-20
URL http://152.195.38.76:80 — 2025-09-20
URL http://152.195.50.149:80 — 2025-09-20
URL http://152.199.38.90:80 — 2025-09-20
URL http://192.229.211.108:80 — 2025-09-20
URL http://194.58.89.203:80 — 2025-09-20
URL http://194.67.96.234:80 — 2025-09-20
URL http://20.69.140.28:443 — 2025-09-20
URL http://20.99.133.109:443 — 2025-09-20
URL http://20.99.185.48:443 — 2025-09-20
URL http://20.99.186.246:443 — 2025-09-20
URL http://218.85.157.99:53 — 2025-09-20
URL http://23.196.145.221:80 — 2025-09-20
URL http://23.213.37.172:80 — 2025-09-20
URL http://23.219.78.43:443 — 2025-09-20
URL http://23.221.103.220:80 — 2025-09-20
URL http://31.31.198.18:80 — 2025-09-20
URL http://34.149.100.209:443 — 2025-09-20
URL http://52.185.73.156:443 — 2025-09-20
URL http://77.223.119.187:5655 — 2025-09-20
URL http://95.213.205.83:5655 — 2025-09-20
URL http://151.101.22.172:80 — 2025-09-20
URL http://152.195.19.97:443 — 2025-09-20
URL http://152.199.19.74:80 — 2025-09-20
URL http://192.229.221.95:80 — 2025-09-20
URL http://199.232.214.172:80 — 2025-09-20
URL http://23.192.210.9:443 — 2025-09-20
URL http://23.195.231.244:443 — 2025-09-20
URL http://23.216.81.152:80 — 2025-09-20
URL http://23.46.228.41:443 — 2025-09-20
URL http://23.46.30.27:80 — 2025-09-20
URL http://23.55.140.42:80 — 2025-09-20
URL http://23.62.210.8:443 — 2025-09-20
URL http://8.8.8.8:53 — 2025-09-20
URL http://www.openantivirus.org/ — 2025-09-20
URL http://www.openantivirus.org/,Pattern — 2025-09-20
URL http://www.openantivirus.org/index.php — 2025-09-20
URL http://www.openantivirus.org/latest.php — 2025-09-20
URL http://www.openantivirus.org/projects.php/ — 2025-09-20
URL http://www.openantivirus.org/virushammer.php — 2025-09-20
URL http://wiki.phpgedview.net/ — 2025-09-20
URL http://wiki.phpgedview.net/en/index.php — 2025-09-20
URL http://wiki.phpgedview.net/en/index.php/Install_IIS_with_PHP_and_MySQL — 2025-09-20
URL http://wiki.phpgedview.net/en/index.php/Users_Guide — 2025-09-20
URL http://wiki.phpgedview.net/en/index.php?title=Main_Page — 2025-09-20
URL http://www.phpgedview.net/ — 2025-09-20
URL http://www.phpgedview.net/media.php — 2025-09-20
URL https://wiki.phpgedview.net/ — 2025-09-20
URL http://www.apcupsd.com/manual/ — 2025-09-20
URL http://www.apcupsd.com/manual/manual.html — 2025-09-20
URL http://www.apcupsd.com/manual/manual.html. — 2025-09-20
URL http://www.apcupsd.com/support.html — 2025-09-20
URL http://www.farsiweb.info/Copyright — 2025-09-20
URL http://www.farsiweb.info/font/farsifonts-0.4.zip — 2025-09-20
URL http://www.farsiweb.info/people.html — 2025-09-20
URL http://www.farsiweb.info/wiki/Products/PersianFonts — 2025-09-20
URL http://wiki.tutos.org/ — 2025-09-20
URL http://www.tutos.org/ — 2025-09-20
URL http://www.tutos.org/download/TUTOS-php-1.2.20050904.tar.gz — 2025-09-20
URL http://www.tutos.org/homepage/about.html — 2025-09-20
URL http://www.tutos.org/homepage/index.html — 2025-09-20
URL https://wiki.tutos.org/index.php/Main_Page — 2025-09-20
URL https://wiki.tutos.org/index.php/Spanish — 2025-09-20
URL http://www.itksnap.org/c3d — 2025-09-20
URL http://www.itksnap.org/c3dFor — 2025-09-20
URL http://www.itksnap.org/docs/fullmanual.php — 2025-09-20
URL http://www.itksnap.org/pmwiki/ — 2025-09-20
URL http://www.itksnap.org/pmwiki/pmwiki.php — 2025-09-20
URL http://www.itksnap.org/pmwiki/pmwiki.php?n=Convert3D.Convert3D — 2025-09-20
URL http://www.itksnap.org/pmwiki/pmwiki.php?n=Convert3D.Point — 2025-09-20
URL http://www.itksnap.org/pmwiki/pmwiki.php?n=Documentation.NewFeaturesVersion30 — 2025-09-20
URL http://www.itksnap.org/pmwiki/pmwiki.php?n=Documentation.SNAP3 — 2025-09-20
URL http://www.itksnap.org/pmwiki/pmwiki.php?n=Documentation.TutorialSectionInstallation — 2025-09-20
URL http://www.itksnap.org/pmwiki/pmwiki.php?n=Documentation.TutorialSectionNewVersionTwo — 2025-09-20
URL http://www.itksnap.org/pmwiki/pmwiki.php?n=Documentation.UpgradingTo30 — 2025-09-20
URL http://www.itksnap.org/pmwiki/pmwiki.php?n=Downloads.Data — 2025-09-20
URL http://www.itksnap.org/pmwiki/pmwiki.php?n=MailingLists.MailingLists — 2025-09-20
URL http://www.itksnap.org/pmwiki/pmwiki.php?n=Main.Downloads%00Take — 2025-09-20
URL http://www.itksnap.org/pmwiki/pmwiki.php?n=SourceCode.SourceCode — 2025-09-20
URL https://www.itksnap.org/pmwiki/pmwiki.php — 2025-09-20
URL http://www.kolourpaint.org/download-1.0.2.html — 2025-09-20
URL http://www.kolourpaint.org/links.html — 2025-09-20
URL http://www.saxproject.org/apidoc/ — 2025-09-20
URL http://www.saxproject.org/apidoc/org/xml/sax/ContentHandler.html\n — 2025-09-20
URL http://www.saxproject.org/apidoc/org/xml/sax/DTDHandler.html\n — 2025-09-20
URL http://www.saxproject.org/apidoc/org/xml/sax/ErrorHandler.html\n\t — 2025-09-20
URL http://www.saxproject.org/apidoc/org/xml/sax/ext/DeclHandler.html\n — 2025-09-20
URL http://www.saxproject.org/apidoc/org/xml/sax/ext/DefaultHandler2.html — 2025-09-20
URL http://www.saxproject.org/apidoc/org/xml/sax/ext/EntityResolver2.html — 2025-09-20
URL http://www.saxproject.org/apidoc/org/xml/sax/ext/EntityResolver2.html\n — 2025-09-20
URL http://www.saxproject.org/apidoc/org/xml/sax/ext/LexicalHandler.html — 2025-09-20
URL http://www.saxproject.org/apidoc/org/xml/sax/ext/LexicalHandler.html\n — 2025-09-20
URL http://www.saxproject.org/apidoc/org/xml/sax/helpers/DefaultHandler.html — 2025-09-20
URL http://www.saxproject.org/apidoc/org/xml/sax/helpers/DefaultHandler.html\n — 2025-09-20
URL http://www.saxproject.org/apidoc/overview — 2025-09-20
URL http://www.saxproject.org/copying.html — 2025-09-20
URL http://www.saxproject.org/copying.htmlFSF — 2025-09-20
URL http://www.saxproject.org/copying.htmlJw — 2025-09-20
URL http://www.saxproject.org/faq.html — 2025-09-20
URL http://www.saxproject.org/namespaces.html — 2025-09-20
URL http://www.kceasy.com/contact/ — 2025-09-20
URL http://www.kceasy.com/docs/inhuman/ — 2025-09-20
URL http://www.kceasy.com/download/ — 2025-09-20
URL http://www.kceasy.com/foo.exe — 2025-09-20
URL http://www.kceasy.com/forum/ — 2025-09-20
URL http://www.kceasy.com/news/ — 2025-09-20
URL http://www.kceasy.com/news/86400 — 2025-09-20
URL http://www.kceasy.com/news/G — 2025-09-20
URL http://www.kceasy.com/news/G)OZ — 2025-09-20
URL http://www.kceasy.com/news/c — 2025-09-20
URL http://www.kceasy.com/news/om/news/ — 2025-09-20
URL http://www.kceasy.com/news/style.cssg — 2025-09-20
URL http://lobby.yura.net — 2025-09-20
URL http://maps.domination.yura.net — 2025-09-20
URL http://maps.domination.yura.net/xml/ — 2025-09-20
URL http://maps.yura.net — 2025-09-20
URL http://maps.yura.net/ — 2025-09-20
URL http://maps.yura.net/maps?format=xml&mapfile=italia.map — 2025-09-20
URL http://maps.yura.net/maps?format=xml&version=1.1.1.7 — 2025-09-20
URL http://maps.yura.net/maps?mapfile= — 2025-09-20
URL http://maps.yura.net/storage/2012 — 2025-09-20
URL http://www.yura.net — 2025-09-20
URL http://www.yura.net/games.shtml — 2025-09-20
URL http://yura.net/cgi — 2025-09-20
URL https://lobby.yura.net — 2025-09-20
URL https://maps.domination.yura.net — 2025-09-20
URL https://maps.yura.net — 2025-09-20
URL https://maps.yura.net/maps/211 — 2025-09-20
URL https://www.yura.net — 2025-09-20
URL https://haha.kolimau.com/api/action/PowerPlayerLatestVersion — 2025-09-20
URL http://208.111.186.0 — 2025-09-20
URL https://community.cotswold.gov.uk/s/bulky-request — 2025-09-20
URL https://community.cotswold.gov.uk/s/waste-collection-missed — 2025-09-20
URL http://www.char0nbaby.online/ — 2025-09-20
URL https://www.char0nbaby.online/ — 2025-09-20
URL http://ea7.rlkjnjk.dns-dynamic.net/ — 2025-09-20
URL http://mjnhgtbhjm6g.dns-dynamic.net/ — 2025-09-20
URL http://paracel-distribute.dns-dynamic.net/ — 2025-09-20
URL http://wefxir4.dns-dynamic.net/ — 2025-09-20
URL http://www.bastion.dns-dynamic.net/ — 2025-09-20
URL http://www.paracel-distribute.dns-dynamic.net/ — 2025-09-20
URL http://www.tyty23.dns-dynamic.net/ — 2025-09-20
URL http://www.vvss98.dns-dynamic.net/ — 2025-09-20
URL http://www.wwa.ujnhyuu.dns-dynamic.net/ — 2025-09-20
URL https://paracel-distribute.dns-dynamic.net/ — 2025-09-20
URL https://tyty23.dns-dynamic.net/ — 2025-09-20
URL https://uptime-timezone.dns-dynamic.net/ — 2025-09-20
URL https://vvss98.dns-dynamic.net/ — 2025-09-20
URL https://weq.dhcfq45.dns-dynamic.net/360 — 2025-09-20
URL https://www.bastion.dns-dynamic.net/ — 2025-09-20
URL https://www.paracel-distribute.dns-dynamic.net/ — 2025-09-20
URL https://www.tyty23.dns-dynamic.net/ — 2025-09-20
URL https://www.vvss98.dns-dynamic.net/ — 2025-09-20
URL https://www.wwa.ujnhyuu.dns-dynamic.net/ — 2025-09-20
URL https://yj3yc2.s3w.ink.dns-dynamic.net/ — 2025-09-20
URL http://chinacache-near-china.daxinlicai.com.bscedge.com/ — 2025-09-20
URL http://cn.bing.net.bscedge.com/ — 2025-09-20
URL http://ditu.live.com.bscedge.com/ — 2025-09-20
URL http://s1.cn.bing.net.bscedge.com/ — 2025-09-20
URL http://ts3.cn.mm.bing.net.bscedge.com/ — 2025-09-20
URL https://ccstatic.ccindex.cn.bscedge.com — 2025-09-20
URL https://chinacache-near-china.daxinlicai.com.bscedge.com/ — 2025-09-20
URL https://cn.bing.net.bscedge.com/ — 2025-09-20
URL https://dev.ditu.live.com.bscedge.com — 2025-09-20
URL https://ditu.live.com.bscedge.com/ — 2025-09-20
URL https://dynamic.t0.tiles.ditu.live.com.bscedge.com — 2025-09-20
URL https://ecn.dev.ditu.live.com.bscedge.com — 2025-09-20
URL https://live.com.bscedge.com — 2025-09-20
URL https://r1.tiles.ditu.live.com.bscedge.com — 2025-09-20
URL https://r2.dynamic.tiles.ditu.live.com.bscedge.com — 2025-09-20
URL https://r2.tiles.ditu.live.com.bscedge.com — 2025-09-20
URL https://t0.tiles.ditu.live.com.bscedge.com — 2025-09-20
URL https://t1.dynamic.tiles.ditu.live.com.bscedge.com — 2025-09-20
URL https://yooghbul.com.bscedge.com — 2025-09-20
URL http://cdnsvc.com.lxcvc.com — 2025-09-20
URL http://cdnsvc.com.lxcvc.com/ — 2025-09-20
URL http://dynamic.tiles.ditu.live.com.lxcvc.com — 2025-09-20
URL http://dynamic.tiles.ditu.live.com.lxcvc.com/ — 2025-09-20
URL http://img.familydoctor.com.cn.lxcvc.com/ — 2025-09-20
URL http://microsoftonline.cdnsvc.com.lxcvc.com — 2025-09-20
URL http://mm.bing.net.lxcvc.com — 2025-09-20
URL http://t2.tiles.ditu.live.com.lxcvc.com/ — 2025-09-20
URL http://www.forevermark.cn.lxcvc.com — 2025-09-20
URL http://www.mof.gov.cn.lxcvc.com/ — 2025-09-20
URL http://www.mohurd.gov.cn.lxcvc.com/ — 2025-09-20
URL http://zfmscdn.v.lxcvc.com — 2025-09-20
URL https://bj58cloud.v.lxcvc.com/ — 2025-09-20
URL https://cdnsvc.com.lxcvc.com — 2025-09-20
URL https://dynamic.tiles.ditu.live.com.lxcvc.com — 2025-09-20
URL https://microsoftonline.cdnsvc.com.lxcvc.com — 2025-09-20
URL https://mm.bing.net.lxcvc.com — 2025-09-20
URL https://www.csrc.gov.cn.lxcvc.com/ — 2025-09-20
URL https://www.forevermark.cn.lxcvc.com — 2025-09-20
URL https://zfmscdn.v.lxcvc.com — 2025-09-20
URL http://wiki.eduke32.com/wiki/Download_EDuke32 — 2025-09-20
URL http://wiki.eduke32.com/wiki/Frequently_Asked_Question — 2025-09-20
URL http://wiki.eduke32.com/wiki/Installation_and_configuration — 2025-09-20
URL https://wiki.eduke32.com/wiki/Main_Page — 2025-09-20
URL http://info.phship.top — 2025-09-20
URL http://info.phship.top/ — 2025-09-20
URL https://info.phship.top — 2025-09-20
URL https://info.phship.top/ — 2025-09-20
URL http://img.linuxtweet.com — 2025-09-20
URL http://test.linuxtweet.com — 2025-09-20
URL http://voip.linuxtweet.com — 2025-09-20
URL http://znsoftech.linuxtweet.com — 2025-09-20
URL https://img.linuxtweet.com — 2025-09-20
URL https://test.linuxtweet.com — 2025-09-20
URL https://voip.linuxtweet.com — 2025-09-20
URL https://znsoftech.linuxtweet.com — 2025-09-20
URL https://online-essex.co.uk/c/AQjLkxIQpMV_GK3ima8BII68_xw2BTm3KIPdDCpDE5AfAQSm1osBSE4yHPcQgczIB7uW0w — 2025-09-20
URL https://online-essex.co.uk/c/AQjLkxIQpMV_GK3ima8BIKC1hB2tWoQVDjDrVq5mApre2syuDDnQ3dGvE10CEkCyGqjRUg — 2025-09-20
URL https://online-essex.co.uk/c/AQjLkxIQpMV_GK3ima8BIP-x_xxGZvGGKvydE-HI_7UMw_cK8Kf1nPaOT9Nz85hVGmNpeQ — 2025-09-20
URL https://online-essex.co.uk/c/AQjLkxIQpMV_GK3ima8BIP2x_xwQex_-FBHlExZ_6dWCJFsburvBVmD8BFDJVB27vWHz8w — 2025-09-20
URL https://online-essex.co.uk/c/AQjLkxIQpMV_GK3ima8BIP6x_xyEJnucSOf9At0Z-X-o7eNiQBlQiw_eTVFy4s7iT6_juA — 2025-09-20
URL https://online-essex.co.uk/c/AQjLkxIQpMV_GK3ima8BIPax_xxaBZlmHtb_795nQzRIkeuyh8OlrOh8fgzIGDovPKKlZA — 2025-09-20
URL https://online-essex.co.uk/c/AQjLkxIQpMV_GK3ima8BIPix_xxwO84wCYJb5bZ-t61xCUwVqya--7SWjdYFRdPXzB35ng — 2025-09-20
URL https://online-essex.co.uk/c/AQjLkxIQpMV_GK3ima8BIPmx_xxBdlVsl677a2KNaz97UOsxw0yqvKj7nVlsEr1SMASVlw — 2025-09-20
URL https://online-essex.co.uk/c/AQjLkxIQpMV_GK3ima8BIPyx_xxyprfY3XVpZdUwP0qY4vN3J_I_SPe_p6pr6xui0o1WHw — 2025-09-20
URL https://online-essex.co.uk/cr/AQjLkxIQpMV_GK3ima8ByPgV-7iS2AZYINAEwJ7ZRR_sgvTvnn0GIxxSc8NNmYw — 2025-09-20
URL https://online-essex.co.uk/o/AQjLkxIQpMV_GK3ima8BIAEK7owYlrolQNJOfGs9HiNkK7XCrTzOAWHtHvR-vbTpoQ/o.gif — 2025-09-20
URL https://online-essex.co.uk/uns/AQjLkxIQpMV_GK3ima8ByPgV-7iS2AZYINAEwJ7ZRR_sgvTvnn0GIxxSc8NNmYw — 2025-09-20
URL http://www.facebook.fr/ChromeSetup.exe — 2025-09-20
URL http://www.facebook.fr/LEcoleEnHarmonie/ — 2025-09-20
URL http://www.facebook.fr/mesrecetteshealthyoupas — 2025-09-20
URL http://www.facebook.fr/share.php?u=?php — 2025-09-20
URL https://www.facebook.fr/زÚÃâââ� — 2025-09-20
URL http://www.facebook.com.tw/49101TheFewToWin — 2025-09-20
URL http://www.facebook.com.tw/Wo.Shr.Bibong — 2025-09-20
URL https://www.facebook.com.tw/loveofrain — 2025-09-20
URL http://www.facebook.dk/Bornholmsbordtennis — 2025-09-20
URL http://www.facebook.dk/bisseruplejren — 2025-09-20
URL http://www.facebook.dk/bisseruplejren. — 2025-09-20
URL http://www.facebook.dk/bisseruplejren.%E2%80%AF%E2%80%AF — 2025-09-20
URL http://www.facebook.dk/hededanmar — 2025-09-20
URL http://www.facebook.dk/krifa — 2025-09-20
URL http://www.facebook.dk/metromusikringsted — 2025-09-20
URL http://www.facebook.dk/people/Anonn — 2025-09-20
URL http://www.facebook.dk/sportsugen — 2025-09-20
URL http://www.facebook.dk/teaterfluks — 2025-09-20
URL https://www.facebook.dk/bisseruplejren. — 2025-09-20
URL https://www.facebook.dk/fritidsjobifuresÃÃââ�%8 — 2025-09-20
URL http://bhashaindia.com/Downloads/IME/Indic2/Helpfiles/Kannada Indic Input 2-User Guide.pdf — 2025-09-20
URL http://bhashaindia.com/SiteCollectionDocuments/Downloads/IME/Indic2/Bengali Indic Input 2 64-bit.zip — 2025-09-20
URL http://bhashaindia.com/SiteCollectionDocuments/Downloads/IME/Indic2/Bengali%20Indic%20Input%202%2064-bit.zip — 2025-09-20
URL http://bhashaindia.com/SiteCollectionDocuments/Downloads/IME/Indic3/Marathi Indic Input 3 64-Bit.zip — 2025-09-20
URL http://dl.bhashaindia.com — 2025-09-20
URL http://dl.bhashaindia.com:443/ — 2025-09-20
URL http://www.bhashaindia.com — 2025-09-20
URL http://www.bhashaindia.com/Developers/MSTech/indicsupport/index.aspx — 2025-09-20
URL http://www.bhashaindia.com/Pages/home.aspx — 2025-09-20
URL http://www.bhashaindia.com/SoW/site_review.aspx?id=15 — 2025-09-20
URL http://www.bhashaindia.com/ilit/ — 2025-09-20
URL https://bhashaindia.com/downloads.aspx — 2025-09-20
URL https://dl.bhashaindia.com — 2025-09-20
URL https://dl.bhashaindia.com/iiw/iiw_sdk/iiw_gujarati.js — 2025-09-20
URL https://www.bhashaindia.com — 2025-09-20
URL https://www.bhashaindia.com/hindi.aspx — 2025-09-20
URL http://images4.citysearch.net/jawr/reinvent/img/cb1280438155/assets/reinvent/img/citysearch/bg_photo_hover.png — 2025-09-20
URL http://images4.citysearch.net/jawr/reinvent/img/cb856304499/assets/reinvent/img/citysearch/default_business_photo60x60.png — 2025-09-20
URL http://mesh.public.onecdn.static.microsoft/mesh/avatars/prod/client/2025.12_20250623.1/Customizer/Customizer.framework.js.gz — 2025-09-20
URL https://mesh.public.onecdn.static.microsoft/mesh/avatars/prod/client/2025.12_20250623.1/Customizer/Customizer.framework.js.gz — 2025-09-20
URL https://dukeworld.com/2001-current/source/ — 2025-09-20
URL http://0856d444e589dc965d43b14133940aba.rqmetrixsdn.info/ — 2025-09-20
URL http://38c4ccc3e99567839da4d9c7f77673d5.rqmetrixsdn.info/ — 2025-09-20
URL http://4aef5f488db31b129d71fa2828d162e7.rqmetrixsdn.info/ — 2025-09-20
URL http://5e02bcc45064fda55dc70c8befff9d64.rqmetrixsdn.info/ — 2025-09-20
URL http://964e27098eecc8f508c25058f754a366.rqmetrixsdn.info/ — 2025-09-20
URL http://email.mg.lelongtips.com/c/eJwczEtywyAMANDTwJKRxEdowaIb3wNTYqfFxhMzocfvTC7wvlMJ2YrVNSF79oiOUe-phDUWWCW4HB1AjUU4BPLeQ3lwDPqZCMiDIKC17NGUBzETxioWI-OqHBybabX1cxvP6zalH7qlfYzrVvZL0aJomXOaaU1_bYoWFBFFy98-jqZf6afn86xm1Lb95uNSDu78zuf4QO9E_wEAAP__alU2Rg — 2025-09-20
URL http://email.mgb.modento.io/c/eJyczUFO7CAYAODTwG4IBR4tCxaTvEE3mmjG6G5C-f8AppSxMFZv78YTeIAvH1gZQCJFO4z_RqOmQSia7By8VppDgElxPoHSASXnYUQB2khNs9Xna32Yhnh79P9fX3K7n8TTeDR4d3Ifb88nTxQvcWalAq69slzpYlPvVyKPRDgi3L7vbJesbpEINxhjiHBfqZeF_ppLhj8smz0n3LB5tiDAN1H8NjcWaqHdArYc17zGQyt5wXZY32m3Ww7pUrA1H5F-WvETAAD__zv5WIw — 2025-09-20
References (51)
↗ Try LogMeIn Resolve For Free — Powerful tools for device management and remote software installs from LogMeInResolve. ↗ Installed on Tsara Brashears phone in a drive up incident in October 2024 ↗ Yara: CATEGORY _7_Zip_Installer ;!@Install@! ;!@InstallEnd@! 7z Igor,Pavlov ↗ Antivirus Detections: Yara.Trojan.Remoteadmin-151 (29:30 BST) - a full list of key details:-1-2-3-4. ↗ EXE:CompanyName • TektonIT EXE:EntryPoint:0x121cf • EXE:FileDescription RMS Component ↗ TektonIT RMS Component • 6.0 Internal Name • LegalCopyright© 2014 TektonIT. ↗ Original Filename: RMS Module PrivateBuild • ProductName • RMS ProductVersion 6.0 ↗ Worn as Watch • Highlighter yellow & green Large Font. Looks like a toy. Clearly a weapon ↗ Non white or African American , black haired Middle Eastern 55+ male in non discreet Car ↗ Vehicle described as Midnight blue , attempted to hit target at a high rate of speed when target left ↗ parking spot on possibly Logan, male tried to clip target at Logan & 18th. No plates ↗ Same target l followed and observed at Metro T-mobile on Evans & Federal in Denver ↗ Described as an Opaque white skinned , non Caucasian bald male. Clearly Persian or Israeli (other) Russian? ↗ He watched a ‘target’ while buying least expensive product available. Shirt with US Flag distraction ↗ Target no longer able to provide info. Paper tags over real Co#LP on car dark colored car. ↗ Attempted, overt side swipe of family member of target in City Park , by W/M w/US Army tags ↗ Not surprisingly driving a Ford F 150 | Very disturbing incidents continue. Goal clear. Hired to K**** ↗ Alerts: recon_fingerprint antisandbox_sleep dynamic_function_loading encrypted_ioc ↗ Alerts: resumethread_remote_process reads_self stealth_window uses_windows_utilities ↗ Alerts: antivm_checks_available_memory queries_keyboard_layout ↗ Alerts: stealth_timeout dll_load_uncommon_file_types antidebug_setunhandledexceptionfilter ↗ Alerts: network_icmp modifies_certificates injection_resumethread dumped_buffer ↗ Alerts: network_cnc_http network_http creates_exe uses_windows_utilities ↗ Alerts: allocates_rwx antisandbox_foregroundwindows ↗ Related Trump pulse: https://otx.alienvault.com/pulse/68c954a80675ccc89b0e9b63 ↗ 6.0.0.0 Deep Impact: +Tsara Brashears , +callmeDoris , +Merkd1904 , +scnrscnr, likely dorkingbeauty ↗ 6.0.0.0 United States AS749 DOD network information center • Historical telemetry ↗ Don’t ask questions. Just terrorize. destroy equipment paid for by US citizens. What’s yours is theirs. ↗ IDS: MALWARE-CNC Win.Trojan.Rfusclient outbound connection ↗ IDS: Matches rule PROTOCOL-ICMP Unusual PING detected ↗ IDS: PROTOCOL-ICMP PING Windows PROTOCOL-ICMP PING PROTOCOL-ICMP Echo Reply ↗ IDS: PUA-OTHER RMS rmansys remote management tool cnc communication ↗ IDS: Unique rule identifier: This rule belongs to a private collection ↗ Signa: Matches rule Msiexec Quiet Installation by frack113 ↗ Sigma: Matches rule Remote Access Tool Services Have Been Installed - Security by Connor Martin, Nasreddine Bencherchali (Nextron Systems) ↗ Sigma: Matches rule Compression Utility Passed Uncommon Directory (via cmdline) by SOC Prime Team ↗ Capabilities: Collection Get geographical location • Log keystrokes via polling ↗ Capabilities: Anti-Analysis Self delete • Inspect load icon resource ↗ Capabilities: Targeting Identify system language via API ↗ Capabilities: Data-Manipulation Encode data using XOR Hash data with CRC32 ↗ Capabilities: Persistence Create shortcut via IShellLink Communication • Write and execute a file ↗ Malware packed. Haven’t sorted all. ↗ Continued stalking • I am of course also being targeted w/ attempts requiring surgery. ↗ Very dangerous. Has been going on for 12+ years affecting everyone who knew target. ↗ Machiavellians have already built a new world with a world. Some fear the Apocalypse they created. ↗ https://apideveloper.santander.cl/sancl/partner/transaction_authorization/v1/coordinate_card/acs/mc/challenge/brw/do/210/dd14d159 ↗ https://apideveloper.santander.cl/sancl/partner/transaction_authorization/v1/coordinate_card/acs/visa/challenge/brw/get/210/d5caee55-c7ae-4b3a-8be7-b65fa5f885c9 ↗ https://apideveloper.santander.cl/sancl/partner/transaction_authorization/v1/coordinate_card/acs/visa/challenge/brw/get/210/d5caee55-c7ae-4b3a-8be7-b65fa5f885c9 ↗ https://apideveloper.santander.cl/sancl/partner/transaction_authorization/v1/coordinate_card/acs/visa/challenge/brw/get/220/6b180faa-7ce7-4e26-a3b0-aa241497c70f ↗ The attackers are all different races, Caucasian, African American, Asian, Indian, Persian, Ethiopian, and ambiguous ↗ I’d like to make an appeal. Please stop. Your original target has gone away.