Hancitor Dec 6

http://crossoundlodge.com

via @techhelplistcom

downloads :
http://eaglecharters.biz/
http://tabretailstaffing.com/
http://tabconstructioninc.com/

gates :
http://tertsahedwith.com/4/forum.php
http://howheidnot.ru/4/forum.php
http://dingtittohi.ru/4/forum.php

some payloads :
http://sensesfinefoods.com/wp-includes/pomo/3
http://saviorforlife.com/wp-content/plugins/ads/3
http://silverstoltsen.com/wp-content/plugins/facebook-comments-plugin/3
http://seasonsfamilymedicine.com/wp-includes/pomo/3
http://arreyhotels.com.br/wp-admin/includes/3
http://sensesfinefoods.com/wp-includes/pomo/1
http://saviorforlife.com/wp-content/plugins/ads/1
http://silverstoltsen.com/wp-content/plugins/facebook-comments-plugin/1
http://seasonsfamilymedicine.com/wp-includes/pomo/1
http://arreyhotels.com.br/wp-admin/includes/1
http://sensesfinefoods.com/wp-includes/pomo/3
http://saviorforlife.com/wp-content/plugins/ads/3
http://silverstoltsen.com/wp-content/plugins/facebook-comments-plugin/3
http://seasonsfamilymedicine.com/wp-includes/pomo/3
http://arreyhotels.com.br/wp-admin/includes/3

ursnif domain
api2.doter.at
asx.zaronif.at
foo.avaregio.at
extra.avareg.cn
in.extermas.at