Криптоджекинг и списки целей: в сетях обнаружена активная эксплуатация уязвимости React2Shell

information security

Исследователи кибербезопасности обнаружили в открытом доступе сервер, используемый злоумышленниками для подготовки масштабных атак с эксплуатацией критической уязвимости CVE-2025-55182, также известной как React2Shell. На сервере находились списки потенциальных жертв, включающие сотни известных компаний, и инструменты для развертывания криптомайнеров.

Описание

Уязвимость, оцененная в 10 баллов по шкале CVSS, затрагивает серверные компоненты React (React Server Components, RSC) в определенных версиях. Она позволяет неавторизованному злоумышленнику выполнить произвольный код на целевом сервере (Remote Code Execution, RCE) через уязвимости в процессах десериализации протокола Flight. Под угрозой находятся пакеты "react-server-dom-webpack", "react-server-dom-turbopack" и "react-server-dom-parcel" в версиях 19.0.0-19.2.0.

Изначально инструмент для сканирования уязвимых систем, опубликованный компанией AssetNote 4 декабря, был быстро переориентирован киберпреступниками. В ходе расследования был идентифицирован открытый директорий на IP-адресе 154.61.77.105 (Индия), содержащий конфигурации для эксплуатации и списки целей. Особый интерес представляет файл "next_target", в котором перечислены 596 потенциальных жертв, включая такие крупные бренды, как Starbucks, Porsche, Lululemon и OpenAI. Отдельно в файле "domains" содержится 35 423 доменных имени для массового сканирования.

Анализ показал, что значительная часть целей относится к финансовому и технологическому секторам. В списке фигурируют 21 финтех-компания, включая Binance, Afterpay и Chime, а также 14 компаний из сферы еды и напитков, таких как Blue Apron и iFood. Это указывает на целенаправленный отбор жертв, возможно, с расчетом на наличие значительных вычислительных ресурсов.

В ходе охоты за инфраструктурой злоумышленников исследователи выявили связь между эксплуатацией React2Shell и криптоджекингом. На нескольких скомпрометированных серверах был обнаружен вредоносный скрипт "sex.sh", предназначенный для развертывания майнера Monero (XMRig). Скрипт создает скрытую службу с безобидным именем, например, "system-update-service", что обеспечивает постоянное присутствие (persistence) в системе и автоматический запуск майнера при загрузке. Были идентифицированы как минимум четыре уникальных кошелька Monero, на которые переводятся средства от незаконного майнинга.

Технический анализ также выявил использование в эксплойтах уникальной строки-разделителя (boundary string) "WebKitFormBoundaryx8jO2oVc6SWP3Sad". Поиск по этой сигнатуре в базах данных FOFA и Censys показал более 500 потенциально скомпрометированных хостов. Важно отметить, что повторное использование одного и того же разделителя нетипично для легитимных браузеров и свидетельствует об автоматизированных атаках с помощью скриптов или инструментов.

Для защиты специалисты рекомендуют немедленно обновить затронутые компоненты Next.js до патченных версий: 15.0.5, 15.1.9, 15.2.6, 15.3.6, 15.4.8, 15.5.7 или 16.0.7. Мониторинг сетевой активности и внедрение в SOC (Security Operations Center) индикаторов компрометации (IoC), таких как известные вредоносные IP-адреса, сигнатуры скриптов и кошельки Monero, помогут выявить инциденты. Обнаруженный случай наглядно демонстрирует, как одна критическая уязвимость в популярном фреймворке может быть использована для быстрого создания ботнета, совмещающего криптоджекинг с целевыми атаками на корпоративный сектор.

Индикаторы компрометации

IPv4

  • 1.53.122.55
  • 1.53.204.241
  • 1.54.216.27
  • 1.55.158.125
  • 100.22.111.223
  • 101.53.236.19
  • 101.53.240.71
  • 102.190.197.173
  • 102.41.218.166
  • 103.126.172.158
  • 103.133.71.237
  • 103.135.49.187
  • 103.135.51.186
  • 103.159.116.174
  • 103.165.215.213
  • 103.184.181.206
  • 103.48.0.38
  • 103.53.184.122
  • 103.55.91.65
  • 103.87.228.232
  • 103.88.123.187
  • 105.155.237.238
  • 107.181.12.128
  • 109.253.1.140
  • 109.253.1.195
  • 109.253.242.229
  • 109.253.3.207
  • 109.253.5.229
  • 109.67.137.238
  • 110.139.200.30
  • 110.39.11.254
  • 110.39.2.244
  • 110.39.25.99
  • 113.161.149.15
  • 113.161.40.16
  • 113.161.78.97
  • 113.164.80.83
  • 113.165.114.5
  • 113.169.34.152
  • 113.174.171.82
  • 113.176.101.203
  • 113.177.115.29
  • 113.183.63.160
  • 113.188.27.0
  • 113.212.112.13
  • 114.34.50.27
  • 115.186.180.114
  • 115.74.52.134
  • 115.76.99.3
  • 115.85.65.18
  • 116.106.153.209
  • 116.109.26.195
  • 116.12.44.13
  • 116.50.217.125
  • 116.50.253.230
  • 117.0.0.182
  • 117.2.243.78
  • 117.56.147.146
  • 117.7.227.87
  • 118.163.177.50
  • 118.163.33.79
  • 118.68.145.227
  • 118.69.133.148
  • 118.71.173.34
  • 119.153.100.212
  • 119.153.108.176
  • 119.73.111.123
  • 121.52.159.242
  • 122.116.103.107
  • 122.117.99.236
  • 122.155.41.211
  • 122.155.41.212
  • 122.160.44.225
  • 122.160.66.183
  • 122.201.137.1
  • 122.201.165.84
  • 122.3.88.105
  • 123.19.71.114
  • 123.23.37.19
  • 123.23.65.83
  • 123.26.81.97
  • 123.31.109.0
  • 124.70.74.79
  • 125.166.91.41
  • 13.126.127.15
  • 13.127.88.231
  • 13.234.52.47
  • 13.238.166.100
  • 130.164.158.122
  • 130.185.96.75
  • 135.181.150.19
  • 14.0.131.231
  • 14.161.48.14
  • 14.164.200.150
  • 14.164.65.102
  • 14.177.64.69
  • 14.180.241.218
  • 14.184.127.207
  • 14.224.213.77
  • 14.224.228.111
  • 14.232.210.90
  • 14.237.194.235
  • 14.241.224.72
  • 14.241.243.138
  • 14.241.254.9
  • 14.247.20.245
  • 143.92.227.86
  • 15.222.166.156
  • 154.180.160.3
  • 156.204.112.170
  • 158.140.173.156
  • 160.176.110.10
  • 164.68.125.227
  • 165.220.203.54
  • 165.220.204.41
  • 165.220.204.66
  • 165.220.205.27
  • 165.220.206.136
  • 165.220.206.72
  • 165.220.212.44
  • 165.220.213.146
  • 165.220.222.16
  • 169.155.248.115
  • 170.78.192.126
  • 171.227.73.35
  • 171.239.124.132
  • 171.247.164.125
  • 171.248.171.81
  • 171.252.121.187
  • 171.255.195.154
  • 176.114.231.17
  • 176.12.128.83
  • 176.12.133.209
  • 176.12.163.250
  • 176.12.163.72
  • 176.12.164.70
  • 176.178.134.208
  • 176.178.150.164
  • 176.82.253.178
  • 178.117.106.179
  • 178.144.114.45
  • 178.145.35.209
  • 178.242.103.252
  • 178.242.137.3
  • 178.242.138.22
  • 178.242.17.85
  • 178.242.24.66
  • 178.242.47.204
  • 178.242.6.50
  • 178.242.63.0
  • 178.242.70.25
  • 178.242.78.245
  • 178.242.9.200
  • 178.81.228.152
  • 18.194.2.53
  • 18.198.146.9
  • 180.214.246.154
  • 180.232.104.169
  • 180.243.125.7
  • 181.197.92.140
  • 182.176.160.214
  • 182.180.104.189
  • 182.180.106.177
  • 182.180.57.119
  • 182.184.30.76
  • 182.184.59.151
  • 182.184.63.172
  • 182.184.67.171
  • 182.187.137.24
  • 182.189.22.89
  • 182.191.114.189
  • 182.191.75.135
  • 182.191.78.40
  • 182.191.91.141
  • 182.23.11.147
  • 182.23.20.116
  • 182.252.67.134
  • 182.253.111.26
  • 182.253.195.51
  • 182.253.217.237
  • 183.80.229.162
  • 185.109.61.231
  • 185.142.92.47
  • 185.178.252.245
  • 185.229.31.181
  • 185.32.179.80
  • 185.44.26.209
  • 185.95.124.111
  • 186.182.59.9
  • 186.188.200.108
  • 186.56.31.33
  • 186.74.162.174
  • 188.212.247.19
  • 188.38.142.116
  • 188.38.159.214
  • 188.38.194.139
  • 188.38.26.65
  • 188.59.129.192
  • 188.59.2.169
  • 188.59.52.68
  • 188.82.190.223
  • 189.36.201.154
  • 190.104.233.50
  • 190.122.183.205
  • 190.123.102.132
  • 190.141.68.247
  • 190.174.96.201
  • 190.18.79.86
  • 190.183.238.92
  • 190.33.221.253
  • 194.32.76.36
  • 194.90.217.166
  • 195.133.156.107
  • 195.97.50.86
  • 196.135.192.59
  • 196.151.246.185
  • 196.192.91.26
  • 196.192.92.18
  • 196.218.112.184
  • 196.218.194.165
  • 196.218.56.170
  • 196.218.58.149
  • 196.218.59.242
  • 196.219.109.109
  • 196.219.109.187
  • 196.219.124.18
  • 196.219.129.3
  • 196.219.130.194
  • 196.219.163.4
  • 196.219.81.67
  • 196.219.91.243
  • 196.221.166.234
  • 196.221.167.175
  • 196.221.36.213
  • 196.221.36.219
  • 196.223.115.5
  • 196.223.116.3
  • 196.223.116.4
  • 196.223.119.34
  • 196.223.120.4
  • 197.136.38.16
  • 197.199.252.93
  • 197.253.130.154
  • 197.44.102.211
  • 197.44.111.114
  • 197.44.116.171
  • 197.44.142.234
  • 197.44.193.226
  • 197.44.194.66
  • 197.44.212.133
  • 197.44.222.90
  • 197.44.248.123
  • 197.44.49.242
  • 197.79.24.16
  • 198.0.79.93
  • 2.144.246.26
  • 2.184.157.98
  • 2.184.158.159
  • 2.187.35.67
  • 2.187.36.208
  • 2.42.204.232
  • 2.54.232.199
  • 2.54.237.226
  • 2.54.237.68
  • 2.55.111.200
  • 2.55.65.76
  • 2.55.68.241
  • 2.55.70.151
  • 2.55.72.6
  • 2.55.72.76
  • 2.55.79.45
  • 2.87.150.173
  • 2.89.135.231
  • 200.110.167.114
  • 200.46.126.59
  • 201.218.218.126
  • 202.59.94.77
  • 203.135.0.89
  • 203.135.0.91
  • 203.135.51.69
  • 203.135.58.75
  • 203.171.216.58
  • 203.30.236.104
  • 203.74.126.164
  • 203.74.133.59
  • 203.99.174.201
  • 203.99.190.78
  • 209.196.239.228
  • 210.56.20.116
  • 211.20.32.90
  • 211.20.50.43
  • 211.75.151.155
  • 211.75.155.5
  • 213.212.200.78
  • 217.219.131.241
  • 217.219.131.62
  • 217.219.159.155
  • 217.219.159.191
  • 217.91.39.102
  • 219.76.188.66
  • 220.128.131.33
  • 220.130.157.102
  • 220.130.222.248
  • 220.246.38.36
  • 222.255.206.191
  • 223.123.45.211
  • 223.123.45.213
  • 24.231.82.84
  • 27.54.120.125
  • 27.64.203.25
  • 27.74.245.28
  • 27.78.194.138
  • 27.78.204.42
  • 3.6.167.48
  • 3.65.86.226
  • 31.141.250.196
  • 31.168.219.113
  • 31.168.31.76
  • 31.25.92.195
  • 31.25.95.67
  • 34.197.209.46
  • 34.215.32.57
  • 34.246.52.35
  • 35.157.246.217
  • 35.172.63.58
  • 36.64.243.159
  • 36.69.50.208
  • 36.70.234.6
  • 36.76.116.209
  • 36.76.126.240
  • 36.80.180.165
  • 36.88.163.77
  • 36.88.99.58
  • 36.90.147.98
  • 36.95.233.83
  • 37.13.128.226
  • 37.82.132.59
  • 41.130.144.234
  • 41.143.110.215
  • 41.152.181.165
  • 41.152.181.171
  • 41.152.181.172
  • 41.153.25.179
  • 41.155.191.45
  • 41.155.213.77
  • 41.178.166.66
  • 41.196.213.226
  • 41.246.163.183
  • 41.251.114.99
  • 41.251.251.47
  • 41.32.4.228
  • 41.32.53.76
  • 41.33.228.114
  • 41.33.228.115
  • 41.38.121.93
  • 41.38.152.181
  • 41.38.184.191
  • 41.38.207.241
  • 41.38.25.163
  • 41.38.39.163
  • 41.38.51.138
  • 41.38.66.205
  • 41.38.8.176
  • 41.65.182.227
  • 41.90.111.26
  • 42.112.190.191
  • 42.118.11.27
  • 42.119.152.222
  • 45.116.207.73
  • 46.104.89.194
  • 46.104.89.198
  • 46.104.89.199
  • 46.104.89.201
  • 46.104.89.202
  • 46.104.89.215
  • 46.104.89.232
  • 46.104.89.236
  • 46.104.89.237
  • 46.104.89.246
  • 46.104.89.248
  • 46.104.89.250
  • 46.104.89.35
  • 46.141.89.193
  • 46.16.223.46
  • 46.167.131.239
  • 46.178.1.175
  • 46.178.20.41
  • 46.178.42.147
  • 46.210.104.96
  • 46.210.105.12
  • 46.210.105.188
  • 46.210.109.93
  • 46.210.110.123
  • 46.210.110.149
  • 46.210.112.212
  • 46.210.113.204
  • 46.210.114.177
  • 46.210.117.104
  • 46.210.126.111
  • 46.210.86.177
  • 46.210.93.73
  • 46.210.95.217
  • 46.210.96.213
  • 46.210.96.96
  • 46.210.99.219
  • 46.23.180.233
  • 47.183.209.26
  • 47.190.63.246
  • 5.106.16.209
  • 5.106.16.216
  • 5.11.147.147
  • 5.11.169.126
  • 5.26.132.101
  • 5.26.140.33
  • 5.26.153.30
  • 5.26.184.209
  • 5.26.194.40
  • 5.26.200.164
  • 5.26.203.199
  • 5.26.205.118
  • 5.26.213.217
  • 5.26.214.130
  • 5.26.228.116
  • 5.26.230.48
  • 5.26.230.69
  • 5.26.235.250
  • 5.26.236.158
  • 5.26.255.229
  • 5.26.56.74
  • 5.26.64.198
  • 5.26.64.201
  • 5.26.87.245
  • 52.11.72.211
  • 52.17.44.125
  • 52.192.115.185
  • 52.28.223.153
  • 52.42.179.192
  • 52.60.214.5
  • 52.64.137.242
  • 52.65.231.232
  • 58.153.40.208
  • 58.69.155.111
  • 59.125.62.144
  • 60.249.3.208
  • 61.216.55.109
  • 61.216.55.110
  • 61.218.239.243
  • 61.219.33.45
  • 61.222.103.41
  • 61.60.148.98
  • 62.114.120.189
  • 62.133.73.157
  • 62.74.160.124
  • 62.74.160.125
  • 62.74.160.126
  • 62.74.160.127
  • 62.74.200.87
  • 77.104.126.224
  • 77.228.67.173
  • 78.38.17.186
  • 78.39.134.44
  • 78.39.220.35
  • 78.39.220.51
  • 79.205.116.228
  • 79.210.202.221
  • 79.227.201.215
  • 79.248.190.210
  • 79.252.93.170
  • 80.191.192.153
  • 80.191.192.161
  • 80.250.154.93
  • 80.250.155.90
  • 80.27.84.52
  • 81.60.217.136
  • 81.60.217.143
  • 81.60.217.161
  • 81.60.217.94
  • 81.60.217.98
  • 81.60.9.34
  • 82.102.166.174
  • 82.102.188.142
  • 82.102.188.190
  • 82.102.189.120
  • 82.129.145.77
  • 83.48.186.228
  • 84.164.196.1
  • 85.159.164.217
  • 85.185.245.19
  • 87.103.85.26
  • 87.246.4.23
  • 87.79.95.101
  • 87.79.95.169
  • 88.213.106.51
  • 88.213.140.86
  • 89.200.101.170
  • 89.42.69.74
  • 89.96.137.194
  • 92.180.160.102
  • 92.62.231.134
  • 93.147.10.212
  • 93.215.222.90
  • 93.221.211.220
  • 93.241.232.226
  • 95.124.252.58
  • 95.210.201.7
  • 95.35.24.18
  • 95.35.25.13
  • 95.35.26.78
  • 95.35.27.143
  • 95.35.27.43
  • 95.35.31.231
  • 95.35.31.243
  • 95.35.50.24
  • 95.38.96.158
  • 95.86.85.118
  • 96.30.161.80

URLs

  • http://1000-premiers-jours.fr
  • http://album.link
  • http://app.reclaim.ai
  • http://arc.net
  • http://artist.link
  • http://artists.soundcloud.com
  • http://auth.khealth.com
  • http://bitpanda.com
  • http://bitso.com
  • http://blockchain.com
  • http://blog.nubank.com.br
  • http://cart.hostgator.com.br
  • http://cdn.nba.com
  • http://chat.openai.com
  • http://culture.on.com
  • http://eu.front-edge.dust.tt
  • http://ifood.com.br
  • http://intigriti.com
  • http://market.immutable.com
  • http://newsroom.sprint.com
  • http://nubank.com.br
  • http://odesli.co
  • http://parceiros.ifood.com.br
  • http://play.immutable.com
  • http://rec.net
  • http://sendbird.com
  • http://song.link
  • http://studio.swapcard.com
  • http://weatherfold4s50-100calculator.brio.com.au
  • http://webwinkel.trouw.nl
  • http://www.1000-premiers-jours.fr
  • http://www.aeromexicobusiness.com
  • http://www.automobile.it
  • http://www.bitso.com
  • http://www.blockchain.com
  • http://www.blueapron.com
  • http://www.bookbeat.com
  • http://www.bybit.com
  • http://www.hostgator.com.br
  • http://www.hrs.com
  • http://www.ifood.com.br
  • http://www.just-eat.ch
  • http://www.just-eat.co.uk
  • http://www.just-eat.dk
  • http://www.just-eat.es
  • http://www.lieferando.de
  • http://www.northwesternmutual.com
  • http://www.null-leasing.com
  • http://www.personio.de
  • http://www.pyszne.pl
  • http://www.sncf-connect.com
  • http://www.subito.it
  • http://www.syfe.com
  • http://www.takeaway.com
  • http://www.thuisbezorgd.nl
  • http://www.t-mobile.com
  • https://389burger.ifood.com.br
  • https://a11y.ecom.np.digital.business.comcast.com
  • https://about.hollywoodcasino.com
  • https://about.thescore.bet
  • https://account.resmed.com
  • https://accounts.clay.earth
  • https://adhoc-bugcrowd.cdn-code.org
  • https://admin.packush.lite.tech
  • https://aeris.irobot.at
  • https://aeris.irobot.de
  • https://aeromexico.com
  • https://af.bumba.global
  • https://affiliates.bybit.com
  • https://affiliates-testnet.bybit.com
  • https://aguacaliente.gleague.nba.com
  • https://album.link
  • https://alumni.wf.com
  • https://amfacturacion.aeromexico.com
  • https://announcement.bybit.com
  • https://announcements.bybit.com
  • https://app.bitgo.com
  • https://app.bitgo-test.com
  • https://app.chatspot.ai
  • https://app.chime.com
  • https://app.ifood.com.br
  • https://app.nubank.com.br
  • https://app.reclaim.ai
  • https://app.tastemade.com
  • https://app.topperpay.com
  • https://arc.net
  • https://arcgiscenter.cbre.eu
  • https://areariservata.subito.it
  • https://artist.link
  • https://artists.soundcloud.com
  • https://assets.blog-frontend.bolt.eu
  • https://assets.careers-v3.bolt.eu
  • https://assets.cdn.personio.de
  • https://assets.homepage.bolt.eu
  • https://assets.seamless.com
  • https://assets.takeaway.com
  • https://assets-sdb.kucoin.com
  • https://assets-v2.kucoin.com
  • https://atlantico.ifood.com.br
  • https://austin.gleague.nba.com
  • https://auth.immutable.com
  • https://auth.khealth.com
  • https://autos.aeromexico.com
  • https://bal.nba.com
  • https://bapi.ifood.com.br
  • https://beneficios.ifood.com.br
  • https://benefits-microfronts.ifood.com.br
  • https://beta.fivetran.com
  • https://bgs2025.bumba.global
  • https://bgs-sandbox.bumba.global
  • https://billythegrill.ifood.com.br
  • https://bink.lite.tech
  • https://birmingham.gleague.nba.com
  • https://bitso.com
  • https://blackhat.team.swapcard.com
  • https://blog.23andme.com
  • https://blog.bybit.com
  • https://blog.dust.tt
  • https://blog.intigriti.com
  • https://blog.lastpass.com
  • https://blog.nubank.com.br
  • https://blog.sendbird.com
  • https://bluecoats.gleague.nba.com
  • https://blueinvestday2021.team.swapcard.com
  • https://boba-vercel-dev.btc.hrs.com
  • https://boss-dtgui-ut.brightspeed.com
  • https://boss-lrgui-e2e.brightspeed.com
  • https://brand.ifood.com.br
  • https://brand.sophos.com
  • https://brasileirinho.ifood.com.br
  • https://brspdpr.brightspeed.com
  • https://brspdqa2.brightspeed.com
  • https://brspduat2.brightspeed.com
  • https://bullish.com
  • https://bumba.global
  • https://bupaqe.ifood.com.br
  • https://campaigns.bybit.com
  • https://capital.clover.com
  • https://capitalcity.gleague.nba.com
  • https://capitanes.gleague.nba.com
  • https://cards-dev.sharerewards.com
  • https://careers.cardinalcommerce.com
  • https://careshows.team.swapcard.com
  • https://carreiras.ifood.com.br
  • https://cart.hostgator.com.br
  • https://cart.starbucks.co.jp
  • https://cdn.nba.com
  • https://cdn.uphold.com
  • https://cdn-bal.nba.com
  • https://cf-frontend-qa.mgm-svod.projects.epam.com
  • https://chat.governmentjobs.com
  • https://chat.openai.com
  • https://chatspot.ai
  • https://ch-cs.fiservapps.com
  • https://checkin.hrs.com
  • https://checkout.hostgator.com.br
  • https://chinadifang.ifood.com.br
  • https://clay.earth
  • https://cleveland.gleague.nba.com
  • https://closerstilltech.team.swapcard.com
  • https://cms.coindesk.com
  • https://coach.bitpanda.com
  • https://communicatie.sporza.be
  • https://compare.porsche.com
  • https://configurator.porsche.com
  • https://conhecaonext.ifood.com.br
  • https://connect.priceless.com
  • https://connect.venly.io
  • https://connect-store.porsche.com
  • https://consensys.io
  • https://console.neon.tech
  • https://conta.iti.itau
  • https://conta.nubank.com.br
  • https://corporate.afterpay.com
  • https://cpskyhawks.gleague.nba.com
  • https://crackerjill.com
  • https://cristal.ifood.com.br
  • https://culture.on.com
  • https://cyber.info
  • https://d.bybit.com
  • https://dahora.ifood.com.br
  • https://data-analytics.tools.auth0.net
  • https://dealalarm.hrs.com:443
  • https://delio.com.pl
  • https://demos.sendbird.com
  • https://desk.sendbird.com
  • https://detroit.gleague.nba.com
  • https://dev.gx.games
  • https://dev.psychobunny.me
  • https://dev.sandbox.gx.games
  • https://dev.vm.auth0.net
  • https://dev-app.agrisync.com
  • https://developer.currencycloud.com
  • https://developer.itau.com.br
  • https://devportal.itau.com.br
  • https://dietly.pl
  • https://doc.demarches-simplifiees.fr
  • https://docs.dust.tt
  • https://docs.keeper.io
  • https://docs.sendbird.com
  • https://docs-dev5.chime.com
  • https://dream.wnba.com
  • https://dust.tt
  • https://dust.tt.
  • https://dust.tt:443
  • https://eabf.team.swapcard.com
  • https://empresas-app.ifood.com.br
  • https://entertainment.wf.com
  • https://es.e2e.smartshop.t-mobile.com
  • https://es.t-mobile.com
  • https://espetoseciadelivery.ifood.com.br
  • https://ethereum-values.consensys.io
  • https://eu.dust.tt
  • https://eu.front-edge.dust.tt
  • https://eu.team.swapcard.com
  • https://exchange.blockchain.com
  • https://explorer.api.openai.com
  • https://fam.mangerbouger.fr
  • https://feiticomineiro.ifood.com.br
  • https://fever.wnba.com
  • https://fiber.brightspeed.com
  • https://finder.porsche.com
  • https://fire.wnba.com
  • https://fivetran.com
  • https://food.bolt.eu
  • https://fortwayne.gleague.nba.com
  • https://fr.shop.lululemon.com
  • https://front-edge.dust.tt
  • https://front-qa.dust.tt
  • https://front-qa.dust.tt:443
  • https://gap.citizenportal-test.bugbounty.akinox.dev
  • https://gdconf.team.swapcard.com
  • https://genos-adit.gw.coches.net
  • https://gleague.nba.com
  • https://grandrapids.gleague.nba.com
  • https://greensboro.gleague.nba.com
  • https://gx.games
  • https://handbook.mattermost.com
  • https://help.acorns.com
  • https://hml-next.itaucultural.org.br
  • https://hollywoodcasino.com
  • https://home.classdojo.com
  • https://home-static.classdojo.com
  • https://homolog.ifood.com.br
  • https://hotelbookings.priceless.com
  • https://hotfix.coindesk.com
  • https://hub.immutable.com
  • https://ideas.classdojo.com
  • https://ignite.gleague.nba.com
  • https://indices.coindesk.com
  • https://infinityart-id.mgm.mo
  • https://inscription.pixpay.fr
  • https://inserimento.subito.it
  • https://insights-netlify.mobileaction.co
  • https://insights-netlify.searchads.com
  • https://interseclive365.team.swapcard.com
  • https://iotusermanager.t-mobile.com
  • https://iowa.gleague.nba.com
  • https://iti.itau
  • https://iut-www.hrs.com
  • https://jaarbeurszakelijk.team.swapcard.com
  • https://johndeeretechinfo.com
  • https://johnnieburger.ifood.com.br
  • https://jwt.io
  • https://labs.ifood.com.br
  • https://lakeland.gleague.nba.com
  • https://learn.bybit.com
  • https://learn-temp.bybit.com
  • https://lebar.sncf-connect.com
  • https://lebistro.tgvinoui.sncf-connect.com
  • https://liberdigital.team.swapcard.com
  • https://library.clay.earth
  • https://linktree.com
  • https://liveconnect.team.swapcard.com
  • https://login.blockchain.com
  • https://loja.ifood.com.br
  • https://longisland.gleague.nba.com
  • https://lynx.wnba.com
  • https://m.sendbird.com
  • https://mailing.kuleuven.be
  • https://maine.gleague.nba.com
  • https://manual.arc.net
  • https://mario.kinder.com
  • https://market.immutable.com
  • https://marketplace.auth0.com
  • https://marketplace.personio.de
  • https://marvin.ifood.com.br
  • https://mediacenter.23andme.com
  • https://memphis.gleague.nba.com
  • https://menu.ifood.com.br
  • https://mijnomgeving.humo.be
  • https://ml.t-mobile.com
  • https://mmm.marabou.se
  • https://music.priceless.com
  • https://my.mimeridian.com
  • https://myhistory.porsche.com
  • https://mylink.page
  • https://news.anytask.com
  • https://news.ifood.com.br
  • https://newsroom.afterpay.com
  • https://noblesville.gleague.nba.com
  • https://npevirtual.team.swapcard.com
  • https://nubank.com.br
  • https://nws.ifood.com.br
  • https://nynow.team.swapcard.com
  • https://odesli.co
  • https://oklahomacity.gleague.nba.com
  • https://ontario.gleague.nba.com
  • https://orbrchampions2023.bybit.com
  • https://osceola.gleague.nba.com
  • https://parceiros.ifood.com.br
  • https://passport.immutable.com
  • https://passport.pepsidigin.com
  • https://pay.just-eat.ch
  • https://pay.just-eat.co.uk
  • https://pay.just-eat.dk
  • https://pay.just-eat.es
  • https://pay.lieferando.de
  • https://pay.menulog.com.au
  • https://pay.pyszne.pl
  • https://pay.takeaway.com
  • https://pay.thuisbezorgd.nl
  • https://paystack.shop
  • https://pennplaycasino.com
  • https://pers.uzleuven.be
  • https://persdienst.kuleuven.be
  • https://personio.de
  • https://picanhariavieiralves.ifood.com.br
  • https://pizzadelivery.ifood.com.br
  • https://pizzariadonnamia.ifood.com.br
  • https://placement-api.afterpay.com
  • https://placement-api.clearpay.co.uk
  • https://placement-api.sandbox.afterpay.com
  • https://placement-api.us.afterpay.com
  • https://placement-api.us-sandbox.afterpay.com
  • https://placement-api-sandbox.clearpay.co.uk
  • https://play.fga.dev
  • https://play.immutable.com
  • https://player-login.unity.com
  • https://playlist.link
  • https://pods.link
  • https://portal.clearpay.co.uk
  • https://portal.enterprise.sandbox.uphold.com
  • https://portal.enterprise.uphold.com
  • https://portal.sandbox.afterpay.com
  • https://portal.sandbox.clearpay.co.uk
  • https://portal.singlestore.com
  • https://portalfacturacionelectronica.aeromexico.com
  • https://portal-sandbox.afterpay.com
  • https://pre-prod.psychobunny.me
  • https://press.porsche-design.com
  • https://privacidade.ifood.com.br
  • https://prod.blockchain.com
  • https://prod.solar.omnitrope.ca
  • https://prod.solar.pro.omnitrope.ca
  • https://public.diabrowser.com
  • https://qa.tr.ee
  • https://raiffeisen.bitpanda.com
  • https://raptors905.gleague.nba.com
  • https://rec.net
  • https://recette-fam.mangerbouger.fr
  • https://restaurationabord.sncf-connect.com
  • https://resume.nanonets.com
  • https://revo-lucaodelivery.ifood.com.br
  • https://rewards.bubly.com
  • https://rice.team.swapcard.com
  • https://riograndevalley.gleague.nba.com
  • https://ripcity.gleague.nba.com
  • https://rollup.moov.io
  • https://run.li.me
  • https://saltlakecity.gleague.nba.com
  • https://sandbox.gx.games
  • https://sandbox.kucoin.com
  • https://sandiego.gleague.nba.com
  • https://santacruz.gleague.nba.com
  • https://search.arc.net
  • https://security.classdojo.com
  • https://security.t-mobile.com
  • https://sendbird.com
  • https://separador.ifood.com.br
  • https://servicecenter.deere.com
  • https://shop.humo.be
  • https://shop.ifood.com.br
  • https://shop.lululemon.com
  • https://shop.tastemade.com
  • https://shop.tastyrewards.com
  • https://siouxfalls.gleague.nba.com
  • https://sira.ifood.com.br
  • https://site.ifood.com.br
  • https://song.link
  • https://southbay.gleague.nba.com
  • https://spacelift.dev
  • https://sports.coral.co.uk
  • https://sports.ladbrokes.com
  • https://staff.monash
  • https://stage.bitso.com
  • https://staging.coindesk.com
  • https://staging.odesli.co
  • https://staging.skipthedishes.com
  • https://staging.song.link
  • https://start.arc.net
  • https://static.binance.us
  • https://static.digital.business.comcast.com
  • https://static.np.digital.business.comcast.com
  • https://static.thinkglobalhealth.org
  • https://static.veriff.com
  • https://static-www.subito.it
  • https://status.aiven.io
  • https://status.blockchain.com
  • https://status.cyber.info
  • https://status.moov.io
  • https://stockton.gleague.nba.com
  • https://storefront.dev.clover.com
  • https://stories.starbucks.co.jp
  • https://student.classdojo.com
  • https://student-static.classdojo.com
  • https://studio.swapcard.com
  • https://support.acorns.com
  • https://support.acorns.com:443
  • https://support.digitalplayground.com
  • https://support.transangels.com
  • https://teach.classdojo.com
  • https://teach-static.classdojo.com
  • https://team.swapcard.com
  • https://testnet.bybit.com
  • https://testnet-announcements.bybit.com
  • https://testnet-newblog.bybit.com
  • https://texas.gleague.nba.com
  • https://thescore.bet
  • https://tms.team.swapcard.com
  • https://todayincrypto.coindesk.com
  • https://tr.ee
  • https://trust.bugcrowd.com
  • https://trust.cyber.info
  • https://trust.fivetran.com
  • https://trust.hex.tech
  • https://trustcenter.itau-unibanco.com.br
  • https://tutor.classdojo.com
  • https://tutoring.classdojo.com
  • https://uat.carrefouruae.com
  • https://uat.lego.me
  • https://uat-bugbounty.nonprod.syfe.com
  • https://uphold.com
  • https://v.gx.games
  • https://valley.gleague.nba.com
  • https://vercel.int-aqm.hca.azure.epmc-stc.projects.epam.com
  • https://vercel.qa-aqm.hca.azure.epmc-stc.projects.epam.com
  • https://veriff.com
  • https://viagens.iupp.com.br
  • https://viz.dust.tt
  • https://vuelaconpuntos.aeromexicorewards.com
  • https://wallet.tg
  • https://weatherfold4s50-100calculator.brio.com.au
  • https://weatherfold-calculator.brio.com.au
  • https://web-middleware.ifood.com.br
  • https://webwinkel.parool.nl
  • https://webwinkel.trouw.nl
  • https://welcome.wf.com
  • https://westchester.gleague.nba.com
  • https://windycity.gleague.nba.com
  • https://wisconsin.gleague.nba.com
  • https://woshwosh.zabka.pl
  • https://ww.ifood.com.br
  • https://www.1000-premiers-jours.fr
  • https://www.10bis.co.il
  • https://www.aeromexico.com
  • https://www.aeromexicobusiness.com
  • https://www.afterpay.com
  • https://www.app.whoop.com
  • https://www.automobile.it
  • https://www.binance.us
  • https://www.bistro.sk
  • https://www.bitpanda.com
  • https://www.blockchain.com
  • https://www.blockchain.com.
  • https://www.blueapron.com
  • https://www.bookbeat.com
  • https://www.bybit.com
  • https://www.byreal.io
  • https://www.carrefouruae.com
  • https://www.clay.earth
  • https://www.clearpay.co.uk
  • https://www.clearpay.co.uk:443
  • https://www.clearpay.com
  • https://www.clover.com
  • https://www.coindesk.com
  • https://www.coral.co.uk
  • https://www.crackerjill.com
  • https://www.designify.com
  • https://www.diabrowser.com
  • https://www.docsend.com
  • https://www.dust.tt
  • https://www.eu.clover.com
  • https://www.fotocasa.es
  • https://www.fritolayvarietypacks.com
  • https://www.getsoulboost.com
  • https://www.hostgator.com.br
  • https://www.hotel-audit.hrs.com
  • https://www.hrs.com
  • https://www.humo.be
  • https://www.ifood.com.br
  • https://www.intigriti.com
  • https://www.itaucultural.org.br
  • https://www.jetblue.com
  • https://www.johndeeretechinfo.com
  • https://www.just-eat.ch
  • https://www.just-eat.co.uk
  • https://www.just-eat.co.uk:443
  • https://www.just-eat.dk
  • https://www.just-eat.es
  • https://www.jwt.io
  • https://www.kinder.com
  • https://www.kucoin.com
  • https://www.ladbrokes.com
  • https://www.lieferando.de
  • https://www.lifewtr.com
  • https://www.mangerbouger.fr
  • https://www.marketplace.classdojo.com
  • https://www.marketplace.personio.de
  • https://www.menulog.com.au
  • https://www.news.ifood.com.br
  • https://www.northwesternmutual.com
  • https://www.nubank.com.br
  • https://www.null-leasing.com
  • https://www.omnitrope.ca
  • https://www.pantryshop.com
  • https://www.pennplaycasino.com
  • https://www.pepsidigin.com
  • https://www.personio.de
  • https://www.pop.ifood.com.br
  • https://www.priceless.com
  • https://www.pro.omnitrope.ca
  • https://www.psychobunny.me
  • https://www.pureleaf.com
  • https://www.pyszne.pl
  • https://www.realcommercial.com.au
  • https://www.rec.net
  • https://www.refreshthenrecycle.com
  • https://www.simplyhired.fr
  • https://www.skipthedishes.com
  • https://www.sncf-connect.com
  • https://www.subito.it
  • https://www.syfe.com
  • https://www.takeaway.com
  • https://www.tastemade.com
  • https://www.thatconceptstore.com
  • https://www.thebrowser.company
  • https://www.thinkglobalhealth.org
  • https://www.thuisbezorgd.nl
  • https://www.t-mobile.com
  • https://www.veriff.com
  • https://www.vtmgo.be
  • https://www.zoop.com.br
  • https://wwww.ifood.com.br
  • https://xcom.team.swapcard.com
  • https://xp1.dust.tt
Комментарии: 0