Hancitor Oct 17

Additional info by @HerbieZimmerman
https://pastebin.com/wsYiXeps

http://wangree-resort.com//thomascarterpt.php
http://arrayhouseclearances.co.uk/.well-known/whitej58.php
http://socialprofile.in/scopic/walli_sw.php
http://chocolatein.xyz/isbq/soundm279.php

below thanks to @wwp96
hxxp://alifmills.com.bd/alifmills/willysheva.php
hxxp://api.namthanh.vn/api/wpal5.php
hxxp://arrayhouseclearances.co.uk/.well-known/whitej58.php
hxxp://chocolatein.xyz/isbq/soundm279.php
hxxp://cmstephensconsulting.com/7izt/rjdcowboy.php
hxxp://dbh.dixitninad.com/.well-known/sylvek1978.php
hxxp://developermurtaza.website/js/wilsonderyeck.php
hxxp://directoryredlands.com/wp-content/tmeyer42.php
hxxp://flagmyface.com/wp-content/tonychu50.php
hxxp://matexpress.com/map/shaneogrady.php
hxxp://ncda.stevenhua.com/wp-includes/sjackson.php
hxxp://nchr.vn/wp-content/seanbwarbird.php
hxxp://rva.agentgrowthpartners.com/.well-known/williamw141955.php
hxxp://sha256.uaround.ru/presentation/wmatthews11.php
hxxp://socialprofile.in/scopic/walli_sw.php
hxxp://spsconsultancyservices.com/wp-admin/sti.plus.php
hxxp://swacvirals.com/wp-admin/walpasley.php
hxxp://wangree-resort.com//thomascarterpt.php
hxxp://wondarshop.in/assests/zumathe.php
hxxp://workxpro.co.in/wp-admin/rklug.php

below thanks to @nazywam
http://maritimelawyers.us/123.php

additional dl
http://afmichicago.org/1
http://afmichicago.org/2
http://african-trips.com/wp-content/themes/aemi1/1
http://african-trips.com/wp-content/themes/aemi1/2
http://aftablarestan.ir/wp-content/uploads/2019/05/1
http://aftablarestan.ir/wp-content/uploads/2019/05/2
http://alferdows.com/1
http://alferdows.com/2
http://cenovia.com/1
http://cenovia.com/2
http://alferdows.com/5
http://afmichicago.org/5
http://aftablarestan.ir/wp-content/uploads/2019/05/5
http://cenovia.com/5
http://african-trips.com/wp-content/themes/aemi1/5

hashes
7fb0901d969f42e358e36931f75ae06e42e4acca6661048a94518920a04bc49c  123.php
c4150d15176bc38c96dc3c1af142ff70fee8d38e081602a44c73cf1897987d69  1.dll
a8a5775bcb0d3196521ec1e95c7a3ec295e2bbee18fca9bde001043172c6e94c  2.exe
d542f42c7e9bae39dbc62fcf0b923c5799e62fabb83db84d8a77b21f166ebfcd  5.exe
4b31fcdcaacde17a47e7ad0664e0a4d8ad06b4f5426342855cac14197e868e5e  e_fax_84469.doc

hancitor c2
http://euroteriage.com/4/forum.php
http://gotladyhope.ru/4/forum.php
http://januserfish.ru/4/forum.php

pony c2
http://euroteriage.com/mlu/forum.php
http://gotladyhope.ru/mlu/forum.php
http://januserfish.ru/mlu/forum.php

evilpony c2
http://euroteriage.com/d2/about.php
http://gotladyhope.ru/d2/about.php
http://januserfish.ru/mlu/d2/about.php

5 ursnif info that was NOT called out in the run
Oct 10 2019
2000
550
Gwe9HMygngWe8kPK
constitution.org/usdeclar.txt
0x4eb7d2ca
com ru org
has.votaritar.at/webstore
8.8.8.8
195.10.195.195
8.8.4.4
95.216.174.175
193.30.123.44
94.247.43.254