Исследователи кибербезопасности обнаружили в открытом доступе сервер, используемый злоумышленниками для подготовки масштабных атак с эксплуатацией критической уязвимости CVE-2025-55182, также известной как React2Shell. На сервере находились списки потенциальных жертв, включающие сотни известных компаний, и инструменты для развертывания криптомайнеров.
Описание
Уязвимость, оцененная в 10 баллов по шкале CVSS, затрагивает серверные компоненты React (React Server Components, RSC) в определенных версиях. Она позволяет неавторизованному злоумышленнику выполнить произвольный код на целевом сервере (Remote Code Execution, RCE) через уязвимости в процессах десериализации протокола Flight. Под угрозой находятся пакеты "react-server-dom-webpack", "react-server-dom-turbopack" и "react-server-dom-parcel" в версиях 19.0.0-19.2.0.
Изначально инструмент для сканирования уязвимых систем, опубликованный компанией AssetNote 4 декабря, был быстро переориентирован киберпреступниками. В ходе расследования был идентифицирован открытый директорий на IP-адресе 154.61.77.105 (Индия), содержащий конфигурации для эксплуатации и списки целей. Особый интерес представляет файл "next_target", в котором перечислены 596 потенциальных жертв, включая такие крупные бренды, как Starbucks, Porsche, Lululemon и OpenAI. Отдельно в файле "domains" содержится 35 423 доменных имени для массового сканирования.
Анализ показал, что значительная часть целей относится к финансовому и технологическому секторам. В списке фигурируют 21 финтех-компания, включая Binance, Afterpay и Chime, а также 14 компаний из сферы еды и напитков, таких как Blue Apron и iFood. Это указывает на целенаправленный отбор жертв, возможно, с расчетом на наличие значительных вычислительных ресурсов.
В ходе охоты за инфраструктурой злоумышленников исследователи выявили связь между эксплуатацией React2Shell и криптоджекингом. На нескольких скомпрометированных серверах был обнаружен вредоносный скрипт "sex.sh", предназначенный для развертывания майнера Monero (XMRig). Скрипт создает скрытую службу с безобидным именем, например, "system-update-service", что обеспечивает постоянное присутствие (persistence) в системе и автоматический запуск майнера при загрузке. Были идентифицированы как минимум четыре уникальных кошелька Monero, на которые переводятся средства от незаконного майнинга.
Технический анализ также выявил использование в эксплойтах уникальной строки-разделителя (boundary string) "WebKitFormBoundaryx8jO2oVc6SWP3Sad". Поиск по этой сигнатуре в базах данных FOFA и Censys показал более 500 потенциально скомпрометированных хостов. Важно отметить, что повторное использование одного и того же разделителя нетипично для легитимных браузеров и свидетельствует об автоматизированных атаках с помощью скриптов или инструментов.
Для защиты специалисты рекомендуют немедленно обновить затронутые компоненты Next.js до патченных версий: 15.0.5, 15.1.9, 15.2.6, 15.3.6, 15.4.8, 15.5.7 или 16.0.7. Мониторинг сетевой активности и внедрение в SOC (Security Operations Center) индикаторов компрометации (IoC), таких как известные вредоносные IP-адреса, сигнатуры скриптов и кошельки Monero, помогут выявить инциденты. Обнаруженный случай наглядно демонстрирует, как одна критическая уязвимость в популярном фреймворке может быть использована для быстрого создания ботнета, совмещающего криптоджекинг с целевыми атаками на корпоративный сектор.
Индикаторы компрометации
IPv4
- 1.53.122.55
- 1.53.204.241
- 1.54.216.27
- 1.55.158.125
- 100.22.111.223
- 101.53.236.19
- 101.53.240.71
- 102.190.197.173
- 102.41.218.166
- 103.126.172.158
- 103.133.71.237
- 103.135.49.187
- 103.135.51.186
- 103.159.116.174
- 103.165.215.213
- 103.184.181.206
- 103.48.0.38
- 103.53.184.122
- 103.55.91.65
- 103.87.228.232
- 103.88.123.187
- 105.155.237.238
- 107.181.12.128
- 109.253.1.140
- 109.253.1.195
- 109.253.242.229
- 109.253.3.207
- 109.253.5.229
- 109.67.137.238
- 110.139.200.30
- 110.39.11.254
- 110.39.2.244
- 110.39.25.99
- 113.161.149.15
- 113.161.40.16
- 113.161.78.97
- 113.164.80.83
- 113.165.114.5
- 113.169.34.152
- 113.174.171.82
- 113.176.101.203
- 113.177.115.29
- 113.183.63.160
- 113.188.27.0
- 113.212.112.13
- 114.34.50.27
- 115.186.180.114
- 115.74.52.134
- 115.76.99.3
- 115.85.65.18
- 116.106.153.209
- 116.109.26.195
- 116.12.44.13
- 116.50.217.125
- 116.50.253.230
- 117.0.0.182
- 117.2.243.78
- 117.56.147.146
- 117.7.227.87
- 118.163.177.50
- 118.163.33.79
- 118.68.145.227
- 118.69.133.148
- 118.71.173.34
- 119.153.100.212
- 119.153.108.176
- 119.73.111.123
- 121.52.159.242
- 122.116.103.107
- 122.117.99.236
- 122.155.41.211
- 122.155.41.212
- 122.160.44.225
- 122.160.66.183
- 122.201.137.1
- 122.201.165.84
- 122.3.88.105
- 123.19.71.114
- 123.23.37.19
- 123.23.65.83
- 123.26.81.97
- 123.31.109.0
- 124.70.74.79
- 125.166.91.41
- 13.126.127.15
- 13.127.88.231
- 13.234.52.47
- 13.238.166.100
- 130.164.158.122
- 130.185.96.75
- 135.181.150.19
- 14.0.131.231
- 14.161.48.14
- 14.164.200.150
- 14.164.65.102
- 14.177.64.69
- 14.180.241.218
- 14.184.127.207
- 14.224.213.77
- 14.224.228.111
- 14.232.210.90
- 14.237.194.235
- 14.241.224.72
- 14.241.243.138
- 14.241.254.9
- 14.247.20.245
- 143.92.227.86
- 15.222.166.156
- 154.180.160.3
- 156.204.112.170
- 158.140.173.156
- 160.176.110.10
- 164.68.125.227
- 165.220.203.54
- 165.220.204.41
- 165.220.204.66
- 165.220.205.27
- 165.220.206.136
- 165.220.206.72
- 165.220.212.44
- 165.220.213.146
- 165.220.222.16
- 169.155.248.115
- 170.78.192.126
- 171.227.73.35
- 171.239.124.132
- 171.247.164.125
- 171.248.171.81
- 171.252.121.187
- 171.255.195.154
- 176.114.231.17
- 176.12.128.83
- 176.12.133.209
- 176.12.163.250
- 176.12.163.72
- 176.12.164.70
- 176.178.134.208
- 176.178.150.164
- 176.82.253.178
- 178.117.106.179
- 178.144.114.45
- 178.145.35.209
- 178.242.103.252
- 178.242.137.3
- 178.242.138.22
- 178.242.17.85
- 178.242.24.66
- 178.242.47.204
- 178.242.6.50
- 178.242.63.0
- 178.242.70.25
- 178.242.78.245
- 178.242.9.200
- 178.81.228.152
- 18.194.2.53
- 18.198.146.9
- 180.214.246.154
- 180.232.104.169
- 180.243.125.7
- 181.197.92.140
- 182.176.160.214
- 182.180.104.189
- 182.180.106.177
- 182.180.57.119
- 182.184.30.76
- 182.184.59.151
- 182.184.63.172
- 182.184.67.171
- 182.187.137.24
- 182.189.22.89
- 182.191.114.189
- 182.191.75.135
- 182.191.78.40
- 182.191.91.141
- 182.23.11.147
- 182.23.20.116
- 182.252.67.134
- 182.253.111.26
- 182.253.195.51
- 182.253.217.237
- 183.80.229.162
- 185.109.61.231
- 185.142.92.47
- 185.178.252.245
- 185.229.31.181
- 185.32.179.80
- 185.44.26.209
- 185.95.124.111
- 186.182.59.9
- 186.188.200.108
- 186.56.31.33
- 186.74.162.174
- 188.212.247.19
- 188.38.142.116
- 188.38.159.214
- 188.38.194.139
- 188.38.26.65
- 188.59.129.192
- 188.59.2.169
- 188.59.52.68
- 188.82.190.223
- 189.36.201.154
- 190.104.233.50
- 190.122.183.205
- 190.123.102.132
- 190.141.68.247
- 190.174.96.201
- 190.18.79.86
- 190.183.238.92
- 190.33.221.253
- 194.32.76.36
- 194.90.217.166
- 195.133.156.107
- 195.97.50.86
- 196.135.192.59
- 196.151.246.185
- 196.192.91.26
- 196.192.92.18
- 196.218.112.184
- 196.218.194.165
- 196.218.56.170
- 196.218.58.149
- 196.218.59.242
- 196.219.109.109
- 196.219.109.187
- 196.219.124.18
- 196.219.129.3
- 196.219.130.194
- 196.219.163.4
- 196.219.81.67
- 196.219.91.243
- 196.221.166.234
- 196.221.167.175
- 196.221.36.213
- 196.221.36.219
- 196.223.115.5
- 196.223.116.3
- 196.223.116.4
- 196.223.119.34
- 196.223.120.4
- 197.136.38.16
- 197.199.252.93
- 197.253.130.154
- 197.44.102.211
- 197.44.111.114
- 197.44.116.171
- 197.44.142.234
- 197.44.193.226
- 197.44.194.66
- 197.44.212.133
- 197.44.222.90
- 197.44.248.123
- 197.44.49.242
- 197.79.24.16
- 198.0.79.93
- 2.144.246.26
- 2.184.157.98
- 2.184.158.159
- 2.187.35.67
- 2.187.36.208
- 2.42.204.232
- 2.54.232.199
- 2.54.237.226
- 2.54.237.68
- 2.55.111.200
- 2.55.65.76
- 2.55.68.241
- 2.55.70.151
- 2.55.72.6
- 2.55.72.76
- 2.55.79.45
- 2.87.150.173
- 2.89.135.231
- 200.110.167.114
- 200.46.126.59
- 201.218.218.126
- 202.59.94.77
- 203.135.0.89
- 203.135.0.91
- 203.135.51.69
- 203.135.58.75
- 203.171.216.58
- 203.30.236.104
- 203.74.126.164
- 203.74.133.59
- 203.99.174.201
- 203.99.190.78
- 209.196.239.228
- 210.56.20.116
- 211.20.32.90
- 211.20.50.43
- 211.75.151.155
- 211.75.155.5
- 213.212.200.78
- 217.219.131.241
- 217.219.131.62
- 217.219.159.155
- 217.219.159.191
- 217.91.39.102
- 219.76.188.66
- 220.128.131.33
- 220.130.157.102
- 220.130.222.248
- 220.246.38.36
- 222.255.206.191
- 223.123.45.211
- 223.123.45.213
- 24.231.82.84
- 27.54.120.125
- 27.64.203.25
- 27.74.245.28
- 27.78.194.138
- 27.78.204.42
- 3.6.167.48
- 3.65.86.226
- 31.141.250.196
- 31.168.219.113
- 31.168.31.76
- 31.25.92.195
- 31.25.95.67
- 34.197.209.46
- 34.215.32.57
- 34.246.52.35
- 35.157.246.217
- 35.172.63.58
- 36.64.243.159
- 36.69.50.208
- 36.70.234.6
- 36.76.116.209
- 36.76.126.240
- 36.80.180.165
- 36.88.163.77
- 36.88.99.58
- 36.90.147.98
- 36.95.233.83
- 37.13.128.226
- 37.82.132.59
- 41.130.144.234
- 41.143.110.215
- 41.152.181.165
- 41.152.181.171
- 41.152.181.172
- 41.153.25.179
- 41.155.191.45
- 41.155.213.77
- 41.178.166.66
- 41.196.213.226
- 41.246.163.183
- 41.251.114.99
- 41.251.251.47
- 41.32.4.228
- 41.32.53.76
- 41.33.228.114
- 41.33.228.115
- 41.38.121.93
- 41.38.152.181
- 41.38.184.191
- 41.38.207.241
- 41.38.25.163
- 41.38.39.163
- 41.38.51.138
- 41.38.66.205
- 41.38.8.176
- 41.65.182.227
- 41.90.111.26
- 42.112.190.191
- 42.118.11.27
- 42.119.152.222
- 45.116.207.73
- 46.104.89.194
- 46.104.89.198
- 46.104.89.199
- 46.104.89.201
- 46.104.89.202
- 46.104.89.215
- 46.104.89.232
- 46.104.89.236
- 46.104.89.237
- 46.104.89.246
- 46.104.89.248
- 46.104.89.250
- 46.104.89.35
- 46.141.89.193
- 46.16.223.46
- 46.167.131.239
- 46.178.1.175
- 46.178.20.41
- 46.178.42.147
- 46.210.104.96
- 46.210.105.12
- 46.210.105.188
- 46.210.109.93
- 46.210.110.123
- 46.210.110.149
- 46.210.112.212
- 46.210.113.204
- 46.210.114.177
- 46.210.117.104
- 46.210.126.111
- 46.210.86.177
- 46.210.93.73
- 46.210.95.217
- 46.210.96.213
- 46.210.96.96
- 46.210.99.219
- 46.23.180.233
- 47.183.209.26
- 47.190.63.246
- 5.106.16.209
- 5.106.16.216
- 5.11.147.147
- 5.11.169.126
- 5.26.132.101
- 5.26.140.33
- 5.26.153.30
- 5.26.184.209
- 5.26.194.40
- 5.26.200.164
- 5.26.203.199
- 5.26.205.118
- 5.26.213.217
- 5.26.214.130
- 5.26.228.116
- 5.26.230.48
- 5.26.230.69
- 5.26.235.250
- 5.26.236.158
- 5.26.255.229
- 5.26.56.74
- 5.26.64.198
- 5.26.64.201
- 5.26.87.245
- 52.11.72.211
- 52.17.44.125
- 52.192.115.185
- 52.28.223.153
- 52.42.179.192
- 52.60.214.5
- 52.64.137.242
- 52.65.231.232
- 58.153.40.208
- 58.69.155.111
- 59.125.62.144
- 60.249.3.208
- 61.216.55.109
- 61.216.55.110
- 61.218.239.243
- 61.219.33.45
- 61.222.103.41
- 61.60.148.98
- 62.114.120.189
- 62.133.73.157
- 62.74.160.124
- 62.74.160.125
- 62.74.160.126
- 62.74.160.127
- 62.74.200.87
- 77.104.126.224
- 77.228.67.173
- 78.38.17.186
- 78.39.134.44
- 78.39.220.35
- 78.39.220.51
- 79.205.116.228
- 79.210.202.221
- 79.227.201.215
- 79.248.190.210
- 79.252.93.170
- 80.191.192.153
- 80.191.192.161
- 80.250.154.93
- 80.250.155.90
- 80.27.84.52
- 81.60.217.136
- 81.60.217.143
- 81.60.217.161
- 81.60.217.94
- 81.60.217.98
- 81.60.9.34
- 82.102.166.174
- 82.102.188.142
- 82.102.188.190
- 82.102.189.120
- 82.129.145.77
- 83.48.186.228
- 84.164.196.1
- 85.159.164.217
- 85.185.245.19
- 87.103.85.26
- 87.246.4.23
- 87.79.95.101
- 87.79.95.169
- 88.213.106.51
- 88.213.140.86
- 89.200.101.170
- 89.42.69.74
- 89.96.137.194
- 92.180.160.102
- 92.62.231.134
- 93.147.10.212
- 93.215.222.90
- 93.221.211.220
- 93.241.232.226
- 95.124.252.58
- 95.210.201.7
- 95.35.24.18
- 95.35.25.13
- 95.35.26.78
- 95.35.27.143
- 95.35.27.43
- 95.35.31.231
- 95.35.31.243
- 95.35.50.24
- 95.38.96.158
- 95.86.85.118
- 96.30.161.80
URLs
- http://1000-premiers-jours.fr
- http://album.link
- http://app.reclaim.ai
- http://arc.net
- http://artist.link
- http://artists.soundcloud.com
- http://auth.khealth.com
- http://bitpanda.com
- http://bitso.com
- http://blockchain.com
- http://blog.nubank.com.br
- http://cart.hostgator.com.br
- http://cdn.nba.com
- http://chat.openai.com
- http://culture.on.com
- http://eu.front-edge.dust.tt
- http://ifood.com.br
- http://intigriti.com
- http://market.immutable.com
- http://newsroom.sprint.com
- http://nubank.com.br
- http://odesli.co
- http://parceiros.ifood.com.br
- http://play.immutable.com
- http://rec.net
- http://sendbird.com
- http://song.link
- http://studio.swapcard.com
- http://weatherfold4s50-100calculator.brio.com.au
- http://webwinkel.trouw.nl
- http://www.1000-premiers-jours.fr
- http://www.aeromexicobusiness.com
- http://www.automobile.it
- http://www.bitso.com
- http://www.blockchain.com
- http://www.blueapron.com
- http://www.bookbeat.com
- http://www.bybit.com
- http://www.hostgator.com.br
- http://www.hrs.com
- http://www.ifood.com.br
- http://www.just-eat.ch
- http://www.just-eat.co.uk
- http://www.just-eat.dk
- http://www.just-eat.es
- http://www.lieferando.de
- http://www.northwesternmutual.com
- http://www.null-leasing.com
- http://www.personio.de
- http://www.pyszne.pl
- http://www.sncf-connect.com
- http://www.subito.it
- http://www.syfe.com
- http://www.takeaway.com
- http://www.thuisbezorgd.nl
- http://www.t-mobile.com
- https://389burger.ifood.com.br
- https://a11y.ecom.np.digital.business.comcast.com
- https://about.hollywoodcasino.com
- https://about.thescore.bet
- https://account.resmed.com
- https://accounts.clay.earth
- https://adhoc-bugcrowd.cdn-code.org
- https://admin.packush.lite.tech
- https://aeris.irobot.at
- https://aeris.irobot.de
- https://aeromexico.com
- https://af.bumba.global
- https://affiliates.bybit.com
- https://affiliates-testnet.bybit.com
- https://aguacaliente.gleague.nba.com
- https://album.link
- https://alumni.wf.com
- https://amfacturacion.aeromexico.com
- https://announcement.bybit.com
- https://announcements.bybit.com
- https://app.bitgo.com
- https://app.bitgo-test.com
- https://app.chatspot.ai
- https://app.chime.com
- https://app.ifood.com.br
- https://app.nubank.com.br
- https://app.reclaim.ai
- https://app.tastemade.com
- https://app.topperpay.com
- https://arc.net
- https://arcgiscenter.cbre.eu
- https://areariservata.subito.it
- https://artist.link
- https://artists.soundcloud.com
- https://assets.blog-frontend.bolt.eu
- https://assets.careers-v3.bolt.eu
- https://assets.cdn.personio.de
- https://assets.homepage.bolt.eu
- https://assets.seamless.com
- https://assets.takeaway.com
- https://assets-sdb.kucoin.com
- https://assets-v2.kucoin.com
- https://atlantico.ifood.com.br
- https://austin.gleague.nba.com
- https://auth.immutable.com
- https://auth.khealth.com
- https://autos.aeromexico.com
- https://bal.nba.com
- https://bapi.ifood.com.br
- https://beneficios.ifood.com.br
- https://benefits-microfronts.ifood.com.br
- https://beta.fivetran.com
- https://bgs2025.bumba.global
- https://bgs-sandbox.bumba.global
- https://billythegrill.ifood.com.br
- https://bink.lite.tech
- https://birmingham.gleague.nba.com
- https://bitso.com
- https://blackhat.team.swapcard.com
- https://blog.23andme.com
- https://blog.bybit.com
- https://blog.dust.tt
- https://blog.intigriti.com
- https://blog.lastpass.com
- https://blog.nubank.com.br
- https://blog.sendbird.com
- https://bluecoats.gleague.nba.com
- https://blueinvestday2021.team.swapcard.com
- https://boba-vercel-dev.btc.hrs.com
- https://boss-dtgui-ut.brightspeed.com
- https://boss-lrgui-e2e.brightspeed.com
- https://brand.ifood.com.br
- https://brand.sophos.com
- https://brasileirinho.ifood.com.br
- https://brspdpr.brightspeed.com
- https://brspdqa2.brightspeed.com
- https://brspduat2.brightspeed.com
- https://bullish.com
- https://bumba.global
- https://bupaqe.ifood.com.br
- https://campaigns.bybit.com
- https://capital.clover.com
- https://capitalcity.gleague.nba.com
- https://capitanes.gleague.nba.com
- https://cards-dev.sharerewards.com
- https://careers.cardinalcommerce.com
- https://careshows.team.swapcard.com
- https://carreiras.ifood.com.br
- https://cart.hostgator.com.br
- https://cart.starbucks.co.jp
- https://cdn.nba.com
- https://cdn.uphold.com
- https://cdn-bal.nba.com
- https://cf-frontend-qa.mgm-svod.projects.epam.com
- https://chat.governmentjobs.com
- https://chat.openai.com
- https://chatspot.ai
- https://ch-cs.fiservapps.com
- https://checkin.hrs.com
- https://checkout.hostgator.com.br
- https://chinadifang.ifood.com.br
- https://clay.earth
- https://cleveland.gleague.nba.com
- https://closerstilltech.team.swapcard.com
- https://cms.coindesk.com
- https://coach.bitpanda.com
- https://communicatie.sporza.be
- https://compare.porsche.com
- https://configurator.porsche.com
- https://conhecaonext.ifood.com.br
- https://connect.priceless.com
- https://connect.venly.io
- https://connect-store.porsche.com
- https://consensys.io
- https://console.neon.tech
- https://conta.iti.itau
- https://conta.nubank.com.br
- https://corporate.afterpay.com
- https://cpskyhawks.gleague.nba.com
- https://crackerjill.com
- https://cristal.ifood.com.br
- https://culture.on.com
- https://cyber.info
- https://d.bybit.com
- https://dahora.ifood.com.br
- https://data-analytics.tools.auth0.net
- https://dealalarm.hrs.com:443
- https://delio.com.pl
- https://demos.sendbird.com
- https://desk.sendbird.com
- https://detroit.gleague.nba.com
- https://dev.gx.games
- https://dev.psychobunny.me
- https://dev.sandbox.gx.games
- https://dev.vm.auth0.net
- https://dev-app.agrisync.com
- https://developer.currencycloud.com
- https://developer.itau.com.br
- https://devportal.itau.com.br
- https://dietly.pl
- https://doc.demarches-simplifiees.fr
- https://docs.dust.tt
- https://docs.keeper.io
- https://docs.sendbird.com
- https://docs-dev5.chime.com
- https://dream.wnba.com
- https://dust.tt
- https://dust.tt.
- https://dust.tt:443
- https://eabf.team.swapcard.com
- https://empresas-app.ifood.com.br
- https://entertainment.wf.com
- https://es.e2e.smartshop.t-mobile.com
- https://es.t-mobile.com
- https://espetoseciadelivery.ifood.com.br
- https://ethereum-values.consensys.io
- https://eu.dust.tt
- https://eu.front-edge.dust.tt
- https://eu.team.swapcard.com
- https://exchange.blockchain.com
- https://explorer.api.openai.com
- https://fam.mangerbouger.fr
- https://feiticomineiro.ifood.com.br
- https://fever.wnba.com
- https://fiber.brightspeed.com
- https://finder.porsche.com
- https://fire.wnba.com
- https://fivetran.com
- https://food.bolt.eu
- https://fortwayne.gleague.nba.com
- https://fr.shop.lululemon.com
- https://front-edge.dust.tt
- https://front-qa.dust.tt
- https://front-qa.dust.tt:443
- https://gap.citizenportal-test.bugbounty.akinox.dev
- https://gdconf.team.swapcard.com
- https://genos-adit.gw.coches.net
- https://gleague.nba.com
- https://grandrapids.gleague.nba.com
- https://greensboro.gleague.nba.com
- https://gx.games
- https://handbook.mattermost.com
- https://help.acorns.com
- https://hml-next.itaucultural.org.br
- https://hollywoodcasino.com
- https://home.classdojo.com
- https://home-static.classdojo.com
- https://homolog.ifood.com.br
- https://hotelbookings.priceless.com
- https://hotfix.coindesk.com
- https://hub.immutable.com
- https://ideas.classdojo.com
- https://ignite.gleague.nba.com
- https://indices.coindesk.com
- https://infinityart-id.mgm.mo
- https://inscription.pixpay.fr
- https://inserimento.subito.it
- https://insights-netlify.mobileaction.co
- https://insights-netlify.searchads.com
- https://interseclive365.team.swapcard.com
- https://iotusermanager.t-mobile.com
- https://iowa.gleague.nba.com
- https://iti.itau
- https://iut-www.hrs.com
- https://jaarbeurszakelijk.team.swapcard.com
- https://johndeeretechinfo.com
- https://johnnieburger.ifood.com.br
- https://jwt.io
- https://labs.ifood.com.br
- https://lakeland.gleague.nba.com
- https://learn.bybit.com
- https://learn-temp.bybit.com
- https://lebar.sncf-connect.com
- https://lebistro.tgvinoui.sncf-connect.com
- https://liberdigital.team.swapcard.com
- https://library.clay.earth
- https://linktree.com
- https://liveconnect.team.swapcard.com
- https://login.blockchain.com
- https://loja.ifood.com.br
- https://longisland.gleague.nba.com
- https://lynx.wnba.com
- https://m.sendbird.com
- https://mailing.kuleuven.be
- https://maine.gleague.nba.com
- https://manual.arc.net
- https://mario.kinder.com
- https://market.immutable.com
- https://marketplace.auth0.com
- https://marketplace.personio.de
- https://marvin.ifood.com.br
- https://mediacenter.23andme.com
- https://memphis.gleague.nba.com
- https://menu.ifood.com.br
- https://mijnomgeving.humo.be
- https://ml.t-mobile.com
- https://mmm.marabou.se
- https://music.priceless.com
- https://my.mimeridian.com
- https://myhistory.porsche.com
- https://mylink.page
- https://news.anytask.com
- https://news.ifood.com.br
- https://newsroom.afterpay.com
- https://noblesville.gleague.nba.com
- https://npevirtual.team.swapcard.com
- https://nubank.com.br
- https://nws.ifood.com.br
- https://nynow.team.swapcard.com
- https://odesli.co
- https://oklahomacity.gleague.nba.com
- https://ontario.gleague.nba.com
- https://orbrchampions2023.bybit.com
- https://osceola.gleague.nba.com
- https://parceiros.ifood.com.br
- https://passport.immutable.com
- https://passport.pepsidigin.com
- https://pay.just-eat.ch
- https://pay.just-eat.co.uk
- https://pay.just-eat.dk
- https://pay.just-eat.es
- https://pay.lieferando.de
- https://pay.menulog.com.au
- https://pay.pyszne.pl
- https://pay.takeaway.com
- https://pay.thuisbezorgd.nl
- https://paystack.shop
- https://pennplaycasino.com
- https://pers.uzleuven.be
- https://persdienst.kuleuven.be
- https://personio.de
- https://picanhariavieiralves.ifood.com.br
- https://pizzadelivery.ifood.com.br
- https://pizzariadonnamia.ifood.com.br
- https://placement-api.afterpay.com
- https://placement-api.clearpay.co.uk
- https://placement-api.sandbox.afterpay.com
- https://placement-api.us.afterpay.com
- https://placement-api.us-sandbox.afterpay.com
- https://placement-api-sandbox.clearpay.co.uk
- https://play.fga.dev
- https://play.immutable.com
- https://player-login.unity.com
- https://playlist.link
- https://pods.link
- https://portal.clearpay.co.uk
- https://portal.enterprise.sandbox.uphold.com
- https://portal.enterprise.uphold.com
- https://portal.sandbox.afterpay.com
- https://portal.sandbox.clearpay.co.uk
- https://portal.singlestore.com
- https://portalfacturacionelectronica.aeromexico.com
- https://portal-sandbox.afterpay.com
- https://pre-prod.psychobunny.me
- https://press.porsche-design.com
- https://privacidade.ifood.com.br
- https://prod.blockchain.com
- https://prod.solar.omnitrope.ca
- https://prod.solar.pro.omnitrope.ca
- https://public.diabrowser.com
- https://qa.tr.ee
- https://raiffeisen.bitpanda.com
- https://raptors905.gleague.nba.com
- https://rec.net
- https://recette-fam.mangerbouger.fr
- https://restaurationabord.sncf-connect.com
- https://resume.nanonets.com
- https://revo-lucaodelivery.ifood.com.br
- https://rewards.bubly.com
- https://rice.team.swapcard.com
- https://riograndevalley.gleague.nba.com
- https://ripcity.gleague.nba.com
- https://rollup.moov.io
- https://run.li.me
- https://saltlakecity.gleague.nba.com
- https://sandbox.gx.games
- https://sandbox.kucoin.com
- https://sandiego.gleague.nba.com
- https://santacruz.gleague.nba.com
- https://search.arc.net
- https://security.classdojo.com
- https://security.t-mobile.com
- https://sendbird.com
- https://separador.ifood.com.br
- https://servicecenter.deere.com
- https://shop.humo.be
- https://shop.ifood.com.br
- https://shop.lululemon.com
- https://shop.tastemade.com
- https://shop.tastyrewards.com
- https://siouxfalls.gleague.nba.com
- https://sira.ifood.com.br
- https://site.ifood.com.br
- https://song.link
- https://southbay.gleague.nba.com
- https://spacelift.dev
- https://sports.coral.co.uk
- https://sports.ladbrokes.com
- https://staff.monash
- https://stage.bitso.com
- https://staging.coindesk.com
- https://staging.odesli.co
- https://staging.skipthedishes.com
- https://staging.song.link
- https://start.arc.net
- https://static.binance.us
- https://static.digital.business.comcast.com
- https://static.np.digital.business.comcast.com
- https://static.thinkglobalhealth.org
- https://static.veriff.com
- https://static-www.subito.it
- https://status.aiven.io
- https://status.blockchain.com
- https://status.cyber.info
- https://status.moov.io
- https://stockton.gleague.nba.com
- https://storefront.dev.clover.com
- https://stories.starbucks.co.jp
- https://student.classdojo.com
- https://student-static.classdojo.com
- https://studio.swapcard.com
- https://support.acorns.com
- https://support.acorns.com:443
- https://support.digitalplayground.com
- https://support.transangels.com
- https://teach.classdojo.com
- https://teach-static.classdojo.com
- https://team.swapcard.com
- https://testnet.bybit.com
- https://testnet-announcements.bybit.com
- https://testnet-newblog.bybit.com
- https://texas.gleague.nba.com
- https://thescore.bet
- https://tms.team.swapcard.com
- https://todayincrypto.coindesk.com
- https://tr.ee
- https://trust.bugcrowd.com
- https://trust.cyber.info
- https://trust.fivetran.com
- https://trust.hex.tech
- https://trustcenter.itau-unibanco.com.br
- https://tutor.classdojo.com
- https://tutoring.classdojo.com
- https://uat.carrefouruae.com
- https://uat.lego.me
- https://uat-bugbounty.nonprod.syfe.com
- https://uphold.com
- https://v.gx.games
- https://valley.gleague.nba.com
- https://vercel.int-aqm.hca.azure.epmc-stc.projects.epam.com
- https://vercel.qa-aqm.hca.azure.epmc-stc.projects.epam.com
- https://veriff.com
- https://viagens.iupp.com.br
- https://viz.dust.tt
- https://vuelaconpuntos.aeromexicorewards.com
- https://wallet.tg
- https://weatherfold4s50-100calculator.brio.com.au
- https://weatherfold-calculator.brio.com.au
- https://web-middleware.ifood.com.br
- https://webwinkel.parool.nl
- https://webwinkel.trouw.nl
- https://welcome.wf.com
- https://westchester.gleague.nba.com
- https://windycity.gleague.nba.com
- https://wisconsin.gleague.nba.com
- https://woshwosh.zabka.pl
- https://ww.ifood.com.br
- https://www.1000-premiers-jours.fr
- https://www.10bis.co.il
- https://www.aeromexico.com
- https://www.aeromexicobusiness.com
- https://www.afterpay.com
- https://www.app.whoop.com
- https://www.automobile.it
- https://www.binance.us
- https://www.bistro.sk
- https://www.bitpanda.com
- https://www.blockchain.com
- https://www.blockchain.com.
- https://www.blueapron.com
- https://www.bookbeat.com
- https://www.bybit.com
- https://www.byreal.io
- https://www.carrefouruae.com
- https://www.clay.earth
- https://www.clearpay.co.uk
- https://www.clearpay.co.uk:443
- https://www.clearpay.com
- https://www.clover.com
- https://www.coindesk.com
- https://www.coral.co.uk
- https://www.crackerjill.com
- https://www.designify.com
- https://www.diabrowser.com
- https://www.docsend.com
- https://www.dust.tt
- https://www.eu.clover.com
- https://www.fotocasa.es
- https://www.fritolayvarietypacks.com
- https://www.getsoulboost.com
- https://www.hostgator.com.br
- https://www.hotel-audit.hrs.com
- https://www.hrs.com
- https://www.humo.be
- https://www.ifood.com.br
- https://www.intigriti.com
- https://www.itaucultural.org.br
- https://www.jetblue.com
- https://www.johndeeretechinfo.com
- https://www.just-eat.ch
- https://www.just-eat.co.uk
- https://www.just-eat.co.uk:443
- https://www.just-eat.dk
- https://www.just-eat.es
- https://www.jwt.io
- https://www.kinder.com
- https://www.kucoin.com
- https://www.ladbrokes.com
- https://www.lieferando.de
- https://www.lifewtr.com
- https://www.mangerbouger.fr
- https://www.marketplace.classdojo.com
- https://www.marketplace.personio.de
- https://www.menulog.com.au
- https://www.news.ifood.com.br
- https://www.northwesternmutual.com
- https://www.nubank.com.br
- https://www.null-leasing.com
- https://www.omnitrope.ca
- https://www.pantryshop.com
- https://www.pennplaycasino.com
- https://www.pepsidigin.com
- https://www.personio.de
- https://www.pop.ifood.com.br
- https://www.priceless.com
- https://www.pro.omnitrope.ca
- https://www.psychobunny.me
- https://www.pureleaf.com
- https://www.pyszne.pl
- https://www.realcommercial.com.au
- https://www.rec.net
- https://www.refreshthenrecycle.com
- https://www.simplyhired.fr
- https://www.skipthedishes.com
- https://www.sncf-connect.com
- https://www.subito.it
- https://www.syfe.com
- https://www.takeaway.com
- https://www.tastemade.com
- https://www.thatconceptstore.com
- https://www.thebrowser.company
- https://www.thinkglobalhealth.org
- https://www.thuisbezorgd.nl
- https://www.t-mobile.com
- https://www.veriff.com
- https://www.vtmgo.be
- https://www.zoop.com.br
- https://wwww.ifood.com.br
- https://xcom.team.swapcard.com
- https://xp1.dust.tt
