https://haelesotho[.]org[.]ls/maile/covid-19/doc/salor/UpdateNew/
hxxp://bijouetfleur[.]com/COVID-19/
hxxp://bijouetfleur[.]com/COVID-19/banks/directing/vancity/
hxxp://bijouetfleur[.]com/COVID-19/banks/directing/vancity/index[.]php
hxxp://coronavirusonooeir[.]huidps[.]com
hxxp://covid-19-banchile-aumento-cupo[.]gq
hxxp://covid-19-canada[.]com/
hxxp://covid19-vat[.]rf[.]gd/?ebay[.]co[.]uk/VAT
hxxp://covid19[.]educa40[.]ao
hxxp://covid19[.]educa40[.]ao/
hxxp://craemrcovid19[.]com
hxxp://dentalleadgroup[.]com/COVID-19/
hxxp://eecovid19-support150[.]hyundaigiadinhsaigon[.]com
hxxp://gouvcanada-covid19[.]com/
hxxp://gouvcanada-covid19[.]com/Cra/Finance/atb/secquestions[.]php
hxxp://gov-ca-covid19[.]org
hxxp://gov-ca-covid19[.]org/
hxxp://mbhydro-covid19[.]com/cibc/
hxxp://mbhydro-covid19[.]com/cibc/question[.]html
hxxp://mbhydro-covid19[.]com/index
hxxp://mbhydro-covid19[.]com/manulife/index[.]html
hxxp://mbhydro-covid19[.]com/manulife/question[.]html
hxxp://mbhydro-covid19[.]com/rbc2/details[.]php
hxxp://mbhydro-covid19[.]com/rbc2/index[.]php
hxxp://mbhydro-covid19[.]com/simplii/
hxxp://mortgageks[.]com/COVID-19/
hxxp://mortgageks[.]com/COVID-19/banks/directing/atbonline/details[.]php
hxxp://mortgageks[.]com/COVID-19/banks/directing/bmo/BMOMobileBanking[.]php
hxxp://mortgageks[.]com/COVID-19/banks/directing/cibc/account[.]php
hxxp://mortgageks[.]com/COVID-19/banks/directing/simplii/index[.]php
hxxp://mortgageks[.]com/COVID-19/banks/directing/vancity/index[.]php
hxxp://nellyreifler[.]com/covid-19/
hxxp://pec-india[.]com/COVID19/file/invoice.php
hxxp://serverstandar[.]com/AMELI-COVID19
hxxp://u664783gie[.]ha004[.]t[.]justns[.]ru/AMELI-COVID-19/asm1/c40a5/PortailAS/miseajour.php
hxxp://u664783gie[.]ha004[.]t[.]justns[.]ru/AMELI-COVID-19/asm1/c40a5/PortailAS/miseajour[.]php
hxxp://visionchb[.]com/ref/covid-19/
hxxp://www[.]gov-ca-covid19[.]org/Cra/Finance/atb/secquestions[.]php
hxxps://account-amazn[.]upgrade[.]bngea[.]com/?sign-up
hxxps://corona-masr3[.]com/CAZANOVA%20TRUE%20LOGIN%20SMART%202019/customer_center/customer-IDPP00C213/myaccount/identity
hxxps://covid-19-banchile-aumento-cupo[.]gq/nuevo/www[.]bancochile[.]cl/10nvfnpa0b/1ohka_persona/login_ckrp/index/loginr5a8/
hxxps://covid-19-banchile-aumento-cupo[.]gq/nuevo/www[.]bancochile[.]cl/qif0kw2hh2/ptk9x_persona/login_pwps/index/loginrcdj/
hxxps://dentalleadgroup[.]com/COVID-19/banks/directing/atbonline/details[.]php
hxxps://dentalleadgroup[.]com/COVID-19/banks/directing/atbonline/question[.]php
hxxps://doggybottom[.]com/ACH/NOTEPURE/uh/No_cap/FBG/
hxxps://envisioncm[.]com/Gov-COVID19/
hxxps://firebasestorage[.]googleapis[.]com/v0/b/nhs-jams31st[.]appspot[.]com/o/NewOff.html?alt=media&token=e4093e74-1b0f-4c3f-b448-4727bb50c636
hxxps://haelesotho[.]org[.]ls/maile/covid-19/doc/salor/UpdateNew/y93sjnb8zyzx709al2dynzm9[.]php?client_id=3EFA2112BBA49683C9B91B694F9E8FCE&response_mode=form_post&response_type=code+id_token&scope=openid+profile&email=&Connect_Authentication_Properties&&nonce=4897749933efa2112bba49683c9b91b694f9e8fce&redirect_uri=&ui_locales=en-US&mkt=en-US
hxxps://laylaraephoto[.]com/covid-19/
hxxps://lifelinen[.]com/blog/wp-content/plugins/ubh/xcc-American-Express/Stay-home-Covid-19/home/
hxxps://lifelinen[.]com/blog/wp-content/plugins/ubh/xcc-American-Express/Stay-home-Covid-19/home/?cmd=www[.]ssaonline-account-service[.]com-update_submit&id=777c560a3f6d728d81a24d2f90833710777c560a3f6d728d81a24d2f90833710&session=777c560a3f6d728d81a24d2f90833710777c560a3f6d728d81a24d2f90833710
hxxps://m-service[.]bnpparibas[.]net/fr/Accueil-part-fr
hxxps://mantis[.]pageupsoft[.]com/vendor/bin/test[.]phc/American-Express-Covid-19-Stay-At-Home/home/
hxxps://mondocard53[.]icu/COVID-19/American-Express-Covid-19-Stay-at-home/home//
hxxps://nellyreifler[.]com/covid-19/
hxxps://orecon[.]co[.]jp/xmlrc-re/American-Express-Covid-19-Stay-at-home/home/
hxxps://pec-india[.]com/COVID19/file/invoice[.]php
hxxps://pec-india[.]com/COVID19/file/office/index[.]php
hxxps://pox-oreoo-8[.]com/cgi-binn/Covid-19-American-Express[.]com/home/
hxxps://sundayblogging[.]com/wp-content/themes/table/Covid-19-Stay-at-home/AMEXFRESH/AMEXFRESH/AMEXFRESH/home/?cmd=www[.]ssaonline-account-service[.]com-update_submit&id=ce4c8239c1d19a36fcadb242c5ad6520ce4c8239c1d19a36fcadb242c5ad6520&session=ce4c8239c1d19a36fcadb242c5ad6520ce4c8239c1d19a36fcadb242c5ad6520
hxxps://sundayblogging[.]com/wp-content/themes/table/Covid-19-Stay-at-home/AMEXFRESH/AMEXFRESH/AMEXFRESH/home/index2[.]php
hxxps://tende[.]rest/Report/Covid-19/12c2f2dd4199732c328a8ea7990831d6/YmVydHJhbmQucm9jaGVyQG1pcm92YS5jb20N