Hancitor Dec 10

exchangebycharlesdavid.com

via @techhelplistcom
http://henmerecrob.com/4/forum.php
http://tofthapenre.ru/4/forum.php
http://wronwithtedsu.ru/4/forum.php

some payloads
http://itssprout.com/wp-includes/1
http://apathtoinnerpeace.com/wp-content/themes/twentyfourteen/1
http://hk3fitness.com/wp-includes/customize/1
http://sycamoreelitefitness.com/modules/DesignManager/1
http://epicintlgroup.com/wp-admin/includes/1
http://itssprout.com/wp-includes/2
http://apathtoinnerpeace.com/wp-content/themes/twentyfourteen/2
http://hk3fitness.com/wp-includes/customize/2
http://sycamoreelitefitness.com/modules/DesignManager/2
http://epicintlgroup.com/wp-admin/includes/2
http://itssprout.com/wp-includes/3
http://apathtoinnerpeace.com/wp-content/themes/twentyfourteen/3
http://hk3fitness.com/wp-includes/customize/3
http://sycamoreelitefitness.com/modules/DesignManager/3
http://epicintlgroup.com/wp-admin/includes/3

ursnif domains
beetfeetlife.bit
api2.doter.at
in.extermas.at
asx.zaronif.at