{"text_format":"2","workbook":"xlsx","n_sheets":2,"sheets":["URLs & IP","Malware"],"not_rendered":{"charts":0,"images":0,"macros":0,"external_links":0,"defined_names":0,"comments":0,"pivot_tables":0},"unopened":[],"bounds":{"document_bytes":16777216,"sheet_cells":100000,"run_cost":"one","rows_first":2000,"rows_last":500,"rows_between":2000,"halvings":0,"cell_chars":16384,"cell_head_chars":4096},"cells_cut":0,"cells_raw":0,"read":"whole","date_system":"1900"}

{"sheet":"URLs & IP","index":0,"n_rows":78,"n_cols":7,"rows_kept":78,"cut":false,"hidden":false,"merged":[]}
["url","registrator","ip","country","city","provider","datetime"]
["abuwire123.ddns.net",null,"0.0.0.0",null,null,null,"06.06.2025 12:09:11"]
["abuwire123h.ddns.net",{"$nulls":5},"06.06.2025 12:09:11"]
["abuwire123.duckdns.org",null,"192.169.69.26","United States","Seattle","Stealthy Hosting","06.06.2025 12:09:11"]
["passte.ee",{"$nulls":5},"06.06.2025 12:09:11"]
["carosnews.com",{"$nulls":5},"06.06.2025 12:09:11"]
["rock-layer.gl.at.ply.gg",null,"147.185.221.29","United States","Carson City","Developed Methods LLC","06.06.2025 09:22:19"]
["rock-layer.gl.at.ply.gg",null,"2602:fbaf:85c:1::1d",null,null,null,"06.06.2025 09:22:19"]
["yourmomishighoncrack-29827.portmap.io",{"$nulls":5},"06.06.2025 09:22:19"]
["pastebin.com/mZ9E6vAF",null,"2a06:98c1:3123:e000::",null,null,null,"06.06.2025 09:21:44"]
["pastebin.com/mZ9E6vAF",null,"2a06:98c1:3122:e000::",null,null,null,"06.06.2025 09:21:44"]
["pastebin.com/mZ9E6vAF",null,"188.114.98.224","United States","San Francisco","CloudFlare, Inc.\n101 Townsend Street, San Francisco, CA 94107, US\n+1 (650) 319-8930\nhttps://cloudflare.com/","06.06.2025 09:21:44"]
["pastebin.com/mZ9E6vAF",null,"188.114.99.224","United States","San Francisco","CloudFlare, Inc.\n101 Townsend Street, San Francisco, CA 94107, US\n+1 (650) 319-8930\nhttps://cloudflare.com/","06.06.2025 09:21:44"]
["141.98.157.249:1194",null,"141.98.157.249",null,null,null,"06.06.2025 16:51:28"]
["146.19.9.211:7000",null,"146.19.9.211",null,null,null,"06.06.2025 16:51:28"]
["147.50.253.15:7000",null,"147.50.253.15","Thailand",null,"CLOUDFOREST CO.,LTD.\ncontact","06.06.2025 16:51:28"]
["149.56.244.29:157",null,"149.56.244.29","Canada","Montreal","OVH Hosting, Inc.","06.06.2025 16:51:28"]
["185.160.30.39:7000",null,"185.160.30.39",null,null,null,"06.06.2025 16:51:28"]
["198.46.243.33:5353",null,"198.46.243.33","United States","Buffalo","HostPapa","06.06.2025 16:51:28"]
["202.79.175.52:6666",null,"202.79.175.52","Korea, Republic of",null,"CTG Server Ltd.","06.06.2025 16:51:28"]
["212.23.222.28:6969",null,"212.23.222.28",null,null,null,"06.06.2025 16:51:28"]
["5.189.168.52:6000",null,"5.189.168.52",null,null,null,"06.06.2025 16:51:27"]
["51.38.140.81:7000",null,"51.38.140.81",null,null,null,"06.06.2025 16:51:27"]
["51.89.207.251:7899",null,"51.89.207.251",null,null,null,"06.06.2025 16:51:27"]
["54.93.49.23:7005",null,"54.93.49.23","United States","Seattle","Amazon Technologies Inc.","06.06.2025 16:51:27"]
["steri-cleanarkansas.com/f6pz",{"$nulls":5},"06.06.2025 18:24:09"]
["sommet-m.com/",{"$nulls":5},"06.06.2025 18:24:09"]
["phineasdavenport.com/4mm8",null,"3.33.251.168","United States","Seattle","Amazon Technologies Inc.","06.06.2025 18:24:09"]
["phineasdavenport.com/4mm8",null,"15.197.225.128","United States","Seattle","Amazon Technologies Inc.","06.06.2025 18:24:09"]
["coachgangus.com/",{"$nulls":5},"06.06.2025 18:24:09"]
["wixambassadors.com/6a0v",{"$nulls":5},"06.06.2025 18:24:09"]
["theprsastore.com/",{"$nulls":5},"06.06.2025 18:24:09"]
["themartofficespace.com/",{"$nulls":5},"06.06.2025 18:24:09"]
["shelleystaton.com/",{"$nulls":5},"06.06.2025 18:24:09"]
["presentablestoner.com/",{"$nulls":5},"06.06.2025 18:24:09"]
["pillsforabortion.com/",null,"3.33.251.168","United States","Seattle","Amazon Technologies Inc.","06.06.2025 18:24:09"]
["pillsforabortion.com/",null,"15.197.225.128","United States","Seattle","Amazon Technologies Inc.","06.06.2025 18:24:09"]
["noplayplayllc.com/lhpe",null,"13.248.213.45","United States","Seattle","Amazon Technologies Inc.","06.06.2025 18:24:09"]
["noplayplayllc.com/lhpe",null,"76.223.67.189","United States","Seattle","Amazon.com, Inc.","06.06.2025 18:24:09"]
["liberetespotentiels.com/",{"$nulls":5},"06.06.2025 18:24:09"]
["innenraumliebe.com/",{"$nulls":5},"06.06.2025 18:24:09"]
["homestead-solutions.com/",{"$nulls":5},"06.06.2025 18:24:09"]
["datexdigital.com/",{"$nulls":5},"06.06.2025 18:24:09"]
["critenhaaf.com/",{"$nulls":5},"06.06.2025 18:24:09"]
["casualgains.com/gt7b",{"$nulls":5},"06.06.2025 18:24:09"]
["axefundingpartners.com/",{"$nulls":5},"06.06.2025 18:24:09"]
["wixambassadors.com",{"$nulls":5},"06.06.2025 18:24:09"]
["theprsastore.com",{"$nulls":5},"06.06.2025 18:24:09"]
["themartofficespace.com",{"$nulls":5},"06.06.2025 18:24:09"]
["taxi-santorini.com",{"$nulls":5},"06.06.2025 18:24:09"]
["steri-cleanarkansas.com",{"$nulls":5},"06.06.2025 18:24:09"]
["sommet-m.com",{"$nulls":5},"06.06.2025 18:24:09"]
["shelleystaton.com",{"$nulls":5},"06.06.2025 18:24:09"]
["presentablestoner.com",{"$nulls":5},"06.06.2025 18:24:09"]
["pillsforabortion.com",null,"3.33.251.168","United States","Seattle","Amazon Technologies Inc.","06.06.2025 18:24:09"]
["pillsforabortion.com",null,"15.197.225.128","United States","Seattle","Amazon Technologies Inc.","06.06.2025 18:24:09"]
["phineasdavenport.com",null,"3.33.251.168","United States","Seattle","Amazon Technologies Inc.","06.06.2025 18:24:09"]
["phineasdavenport.com",null,"15.197.225.128","United States","Seattle","Amazon Technologies Inc.","06.06.2025 18:24:09"]
["noplayplayllc.com",null,"13.248.213.45","United States","Seattle","Amazon Technologies Inc.","06.06.2025 18:24:09"]
["noplayplayllc.com",null,"76.223.67.189","United States","Seattle","Amazon.com, Inc.","06.06.2025 18:24:09"]
["mysitebrianburks56.com",{"$nulls":5},"06.06.2025 18:24:09"]
["liberetespotentiels.com",{"$nulls":5},"06.06.2025 18:24:09"]
["instabench.com",{"$nulls":5},"06.06.2025 18:24:09"]
["innenraumliebe.com",{"$nulls":5},"06.06.2025 18:24:09"]
["i-framestudio.com",{"$nulls":5},"06.06.2025 18:24:09"]
["homestead-solutions.com",{"$nulls":5},"06.06.2025 18:24:09"]
["energptsolutions.com",{"$nulls":5},"06.06.2025 18:24:09"]
["datexdigital.com",{"$nulls":5},"06.06.2025 18:24:09"]
["critenhaaf.com",{"$nulls":5},"06.06.2025 18:24:09"]
["cosmos-access.com",{"$nulls":5},"06.06.2025 18:24:09"]
["coachgangus.com",{"$nulls":5},"06.06.2025 18:24:09"]
["casualgains.com",{"$nulls":5},"06.06.2025 18:24:09"]
["axefundingpartners.com",{"$nulls":5},"06.06.2025 18:24:09"]
[null,null,"23.186.113.60","United States","Cheyenne","Aurora Development LLC","06.06.2025 12:09:11"]
[null,null,"66.63.187.232","United States","Los Angeles","QuadraNet Enterprises LLC","06.06.2025 12:09:11"]
[null,null,"196.251.118.41","Seychelles",null,"internet-security-Nybula","06.06.2025 12:09:11"]
[null,null,"66.63.187.154","United States","Buffalo","HostPapa","06.06.2025 12:09:11"]
[null,null,"[ipv4-addr:value ISSUBSET '45.145.43.0/24",null,null,null,"06.06.2025 12:09:11"]

{"sheet":"Malware","index":1,"n_rows":3,"n_cols":7,"rows_kept":3,"cut":false,"hidden":false,"merged":[]}
["url","sha256","imphash","ssdeep","name","extension","datetime"]
["bazaar.abuse.ch/download/7df7d998a4613f1faf81abcea746fe8f3f49c3857ea6898621a5b435ff1aa354","7df7d998a4613f1faf81abcea746fe8f3f49c3857ea6898621a5b435ff1aa354",null,"48:+O8oLmoWOtLLAmLujFHAdLb9NaNWi4x8IW4ILKxe+LlCft4GSrR:+O8IWOpALFHAvANYqIW4/o+LB/R","7df7d998a4613f1faf81abcea746fe8f3f49c3857ea6898621a5b435ff1aa354.ps1",null,"07.06.2025 09:29:40"]
["bazaar.abuse.ch/download/60a9b0332c1356172a50f85de079783d8e3b2d81357422b739aa73ebbe075437","60a9b0332c1356172a50f85de079783d8e3b2d81357422b739aa73ebbe075437","f34d5f2d4577ed6d9ceec516c1f5a744","768:MwUNh3QcL/H1+5ZU5ASnFyrybFr9YQrOMhF3fvU:MVH3QcL/H1IohgrmFr9YQrOMznU","d5w4g85f4aw84hz584i5zt45gtf4d85z4t5uj.exe","exe","06.06.2025 06:03:26"]