{
	"id": "31f138d5-087c-4bb0-b4a0-660042af8de2",
	"created_at": "2026-04-06T00:19:40.681567Z",
	"updated_at": "2026-04-10T03:34:22.581576Z",
	"deleted_at": null,
	"sha1_hash": "ddb0dcbd13485f05e8b8327cf0a47c62ecc0e35a",
	"title": "Burping on MuddyWater",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 80745,
	"plain_text": "Burping on MuddyWater\r\nBy Mo Bustami\r\nPublished: 2018-02-01 · Archived: 2026-04-05 17:52:22 UTC\r\nIn an earlier blog posts, I wrote about a campaign that was targeting the Middle East (Saudi Arabia, Iraq, UAE,\r\netc). The adversary group behind this campaign was covered by PaloAlto's UNIT42 and others under the name\r\nMuddyWater.\r\nIn this blog I will be sharing new samples related to this adversary group and how they are continuing to evolve\r\nand how they shifted some of their delivery tactics.\r\nThis all started when I saw a tweet from @x0rz referring to a blogpost where they reversed a BurpSuite Key\r\nGenerator. \r\nI recommend everyone to go and read the above mentioned blogpost as it is really well done and goes into detail\r\nregarding the analysis of this malicious Key Generator. I will NOT be covering the analysis again since the folks\r\nat 0x00sec covered it amazingly.\r\nI will be providing some additional IoCs related to this campaign, discuss the shift in the techniques used by\r\nMuddyWater and cast a few questions that are surrounding this actor.\r\nIn this instance the attackers leveraged a Key Generator for the BurpSuite tool and trojanzied it so when a\r\npotential victim tries to run the Key Generator, they will also be running the attackers code which is in this case is\r\na variant of POWERSTATS.\r\nThis shows that MuddyWater group is continuing activity and might be looking to change some of their\r\ntechniques. However, this just creates more questions than answers and add to the great reason behind naming\r\nthem MuddyWater.\r\nSAMPLE - hxxp://www[.]hackingcrunch.com/wp-content/uploads/Burp/burpsuite_pro_v1.7.30.zip\r\nhxxp://aandacompany[.]com/connection[.]php\r\nhxxp://ankara24saatacikcicekci[.]com/admin/connection[.]php\r\nhxxp://ankara24saatcicek[.]com/admin/controller/common/connection[.]php\r\nhxxp://ankara24saatcicek[.]net/admin/controller/play/connection[.]php\r\nhxxp://ankaraikincielesyalar[.]com/admin/_sayfalar/connection[.]php\r\nhxxp://ankarakiralikvinc[.]web[.]tr/wp-admin/connection[.]php\r\nhxxp://ankaramehteri[.]com/admin/_islemler/connection[.]php\r\nhttps://sec0wn.blogspot.com/2018/02/burping-on-muddywater.html\r\nPage 1 of 31\n\nhxxp://ankaraotokurtarici[.]web[.]tr/wp-includes/connection[.]php\r\nhxxp://aazbs[.]com/wp-admin/includes/connection[.]php\r\nhxxp://ankaratemizlik[.]web[.]tr/include/connection[.]php\r\nhxxp://ankaratemizliksirketleri[.]web[.]tr/wp-includes/connection[.]php\r\nhxxp://www[.]aofdersleri[.]net/wp-admin/connection[.]php\r\nhxxp://www[.]aofdersleri[.]net/wp-content/themes/hueman/connection[.]php\r\nhxxp://apaktem[.]com/wp-admin/connection[.]php\r\nhxxp://aquamasaj[.]com/ozzzpanel/documentation/connection[.]php\r\nhxxp://aracexpress[.]com/wp-admin/connection[.]php\r\nhxxp://arasbg[.]com/yonetimpaneli/connection[.]php\r\nhxxp://ardatur[.]com/sayfalar/connection[.]php\r\nhxxp://ardvessels[.]com/online-catalog/connection[.]php\r\nhxxp://artikhazirsin[.]remingtonturkiye[.]com/erkek/wp-admin/sconnection[.]php\r\nhxxp://artistanbul[.]tv/wp-admin/connection[.]php\r\nhxxp://artistlogistics[.]net/wp-admin/connection[.]php\r\nhxxp://artistlogistics[.]net/wp-includes/connection[.]php\r\nhxxp://aslanmangalkomuru[.]com/panel/connection[.]php\r\nhxxp://aslanorganizasyon[.]com//fonts/icomoon/connection[.]php\r\nhxxp://aslimaj[.]com/wp-admin/connection[.]php\r\nhxxp://astra[.]com[.]tr/master/sass/vendor/bourbon/helpers/connection[.]php\r\nhxxp://asturkgrup[.]com/ar/cache/connection[.]php\r\nhxxp://asturkgrup[.]com/ar/yonetimpaneli/connection[.]php\r\nhxxp://asturkkimya[.]com/W3/fonksiyon/connection[.]php\r\nhxxp://asturkmadencilik[.]com/inc/connection[.]php\r\nhxxp://atakantarimci[.]com[.]tr/wp-admin/connection[.]php\r\nhxxp://ataklojistik[.]com/administrator/modules/mod_toolbar/connection[.]php\r\nhttps://sec0wn.blogspot.com/2018/02/burping-on-muddywater.html\r\nPage 2 of 31\n\nhxxp://atamanelektronik[.]com/administrator/components/com_banners/connection[.]php\r\nhxxp://atamanelektronik[.]com/components/com_content/models/connection[.]php\r\nhxxp://atasehiryuzme[.]com/wp-admin/connection[.]php\r\nhxxp://atasehiryuzme[.]com/wp-includes/Requests/connection[.]php\r\nhxxps://www[.]atayuzme[.]com[.]tr/deneme1/connection[.]php\r\nhxxp://atkiatkisi[.]net/panel/connection[.]php\r\nhxxp://atkiatkisiimalat[.]com//blog/wp-admin/connection[.]php\r\nhxxp://avrupabaski[.]com/yillik/cmsal2017/connection[.]php\r\nhxxp://avsserradecor[.]com/katalog/mobile/styles/connection[.]php\r\nhxxp://ayakkabisitesi[.]com/wp-admin/connection[.]php\r\nhxxp://aycinteker[.]com/wp-admin/connection[.]php\r\nhxxp://aydincaliskankanarya[.]com/wp-admin/connection[.]php\r\nhxxp://aydincaliskankanarya[.]com/wp-content/themes/twentyseventeen/connection[.]php\r\nhxxp://aydinsenturk[.]com/ozerkaya/connection[.]php\r\nhxxp://aygunotomasyon[.]com/administrator/components/com_languages/connection[.]php\r\nhxxp://aygunotomasyon[.]com/components/com_user/connection[.]php\r\nhxxp://aymuhendislik[.]com/wp-admin/connection[.]php\r\nhxxp://aymuhendislik[.]com/wp-includes/ID3/connection[.]php\r\nhxxp://aysekaya[.]com[.]tr/wp-admin/connection[.]php\r\nhxxp://azermaral[.]com/wp-admin/connection[.]php\r\nhxxp://bahadirsahinoglu[.]com/wp-admin/connection[.]php\r\nhxxp://bahadirsahinoglu[.]com/wp-includes/connection[.]php\r\nhxxp://baharakgul[.]com/wp-admin/connection[.]php\r\nhxxp://balcidede[.]com[.]tr/admin/inc/connection[.]php\r\nhxxp://baldatca[.]com/admin/controller/extension/connection[.]php\r\nhxxp://baldatca[.]com/system/config/connection[.]php\r\nhttps://sec0wn.blogspot.com/2018/02/burping-on-muddywater.html\r\nPage 3 of 31\n\nhxxp://baranakinturk[.]com[.]tr/wp-includes/ID3/connection[.]php\r\nhxxp://baskale[.]bel[.]tr/admin/inc/connection[.]php\r\nhxxp://baskoyluhasanefendi[.]com/administrator/includes/connection[.]php\r\nhxxp://baspinarlartulumpeyniri[.]com/wp-admin/connection[.]php\r\nhxxp://bayrampasabocekilaclama[.]net/wp-content/plugins/google-sitemap-generator/connection[.]php\r\nhxxp://bebekyuzmekurslari[.]com/wp-admin/connection[.]php\r\nhxxp://bebekyuzmekurslari[.]com/wp-admin/connection[.]php\r\nhxxp://www[.]berkyilmaz[.]com[.]tr/wp-admin/connection[.]php\r\nhxxp://bervin[.]com[.]tr/yonetimpaneli/fonksiyonlar/connection[.]php\r\nhxxp://beyazavukatlik[.]com/wp-admin/connection[.]php\r\nhxxp://beyzbolturk[.]com/wp-admin/includes/connection[.]php\r\nhxxp://bienart[.]com/cagdas/panel/connection[.]php\r\nhxxp://bifikirajans[.]com/hosting2/connection[.]php\r\nhxxp://bihaliortusu[.]com/wp-content/plugins/js_composer/config/deprecated/connection[.]php\r\nhxxp://bilenbizibilir[.]com/wp-includes/connection[.]php\r\nhxxp://bilsem[.]club/forum/connection[.]php\r\nhxxp://biodogacevre[.]com/admin/css/connection[.]php\r\nhxxp://birfidanbirumut[.]org[.]tr/admin/ckeditor/connection[.]php\r\nhxxp://bitekservis[.]com/adamsin/controller/sale/connection[.]php\r\nhxxp://bitekservis[.]com/adamsin/model/sample/lexus_superstore/connection[.]php\r\nhxxp://biyanyapi[.]com/deneme/connection[.]php\r\nhxxp://bmenerji[.]com[.]tr/wp-admin/connection[.]php\r\nhxxp://bmenerji[.]com[.]tr/wp-includes/connection[.]php\r\nhxxp://bocekilaclama[.]gen[.]tr/admin/connection[.]php\r\nhxxp://bocekilaclamahizmeti[.]com/wp-admin/connection[.]php\r\nhxxp://bocekilaclamazeytinburnu[.]net/wp-includes/connection[.]php\r\nhttps://sec0wn.blogspot.com/2018/02/burping-on-muddywater.html\r\nPage 4 of 31\n\nhxxp://bolgemuhabirligi[.]com/wp-admin/connection[.]php\r\nhxxp://booksandtoys[.]com[.]tr/admin/controller/design/connection[.]php\r\nhxxp://bor[.]superyaz[.]com/admin/controller/catalog/connection[.]php\r\nhxxp://brctsrm[.]com/wp-admin/connection[.]php\r\nhxxp://bsmtrans[.]com/eskiindex-php/_modules/connection[.]php\r\nhxxp://btafbearings[.]com/connection[.]php\r\nhxxp://burakdoseme[.]com/admin/ckeditor/connection[.]php\r\nhxxp://burkertparts[.]com/include/connection[.]php\r\nhxxp://www[.]aalotv[.]com/wp-admin/connection[.]php\r\nhxxp://acmecepl[.]com/connection[.]php\r\nhxxps://aareezenterprises[.]com/php/connection[.]php\r\nhxxp://laserswat[.]com/admin/language/english/payment/connection[.]php\r\nhxxp://ksu[.]com[.]tr/admin53x/ckfinder/core/connector/php/lang/connection[.]php\r\nhxxp://www[.]lamiademir[.]com/myadmin/connection[.]php\r\nhxxp://admissions[.]ae/wp-content/upgrade/connection[.]php\r\nhxxp://liladecor[.]com[.]tr/administrator/templates/system/connection[.]php\r\nhxxp://agripal[.]ae/wp/wp-includes/IXR/connection[.]php\r\nhxxp://kuzeyyeliinsaat[.]com[.]tr/admin/connection[.]php\r\nhxxp://www[.]ajmansexymassagebodytobody[.]com/js/connection[.]php\r\nhxxp://krediogren[.]net/wp-content/themes/TJG-magazine/connection[.]php\r\nhxxp://alarabtents[.]com/connection[.]php\r\nhxxp://aleter[.]ae/connection[.]php\r\nhxxp://alfahadmedia[.]ae/wp1/connection[.]php\r\nhxxp://limanyapidenetim[.]com[.]tr/admin/connection[.]php\r\nhxxp://www[.]alothman-gt[.]com/wp-includes/pomo/connection[.]php\r\nhxxp://azracateringme[.]ae/connection[.]php\r\nhttps://sec0wn.blogspot.com/2018/02/burping-on-muddywater.html\r\nPage 5 of 31\n\nhxxp://bakemartplus[.]ae/bakemart[.]ae/connection[.]php\r\nhxxp://www[.]agrininmarkalari[.]com/wp-content/themes/tema/connection[.]php\r\nhxxp://bhic-group[.]com/wp-includes/images/smilies/connection[.]php\r\nhxxp://www[.]big-bang[.]ae/wp-content/themes/twentyfifteen/genericons/connection[.]php\r\nhxxp://bloorco[.]com/vendor/jquery/connection[.]php\r\nhxxp://aitech[.]com[.]tr/admin/connection[.]php\r\nhxxp://bwtest1[.]apps[.]ae/wp-includes/pomo/connection[.]php\r\nhxxp://capital[.]wistech[.]biz/wp-includes/customize/connection[.]php\r\nhxxp://akademihastanesi[.]net/wp-content/themes/twentyseventeen/connection[.]php\r\nhxxp://www[.]akkurtgida[.]com[.]tr/tr/templates/atomic/connection[.]php\r\nhxxp://chat[.]honda[.]ae/support/html/connection[.]php\r\nhxxp://www[.]clearviewuae[.]com/wp-includes/widgets/connection[.]php\r\nhxxp://cmsolutions[.]ae/wp-includes/fonts/connection[.]php\r\nhxxp://cool-group[.]net/pm/connection[.]php\r\nhxxp://mistcool[.]ae/connection[.]php\r\nhxxp://bigfans[.]ae/connection[.]php\r\nhxxp://cool-group[.]net/support/connection[.]php\r\nhxxp://cooldoctor[.]ae/less/connection[.]php\r\nhxxp://akparplastik[.]com/connection[.]php\r\nhxxp://coolingdubai[.]com/connection[.]php\r\nhxxp://mistingdubai[.]net/connection[.]php\r\nhxxp://aysamturizm[.]com[.]tr/wp-includes/connection[.]php\r\nhxxp://azizinsaat[.]com/panelim/connection[.]php\r\nhxxp://aypir[.]com/wp-admin/connection[.]php\r\nhxxp://delinmeal[.]com/inventory/connection[.]php\r\nhxxp://www[.]basoglucit[.]com/wp-includes/theme-compat/connection[.]php\r\nhttps://sec0wn.blogspot.com/2018/02/burping-on-muddywater.html\r\nPage 6 of 31\n\nhxxp://bckkaucuk[.]com/wp-admin/connection[.]php\r\nhxxp://davetyaymak[.]com/sys/connection[.]php\r\nhxxp://dikon[.]com[.]tr/connection[.]php\r\nhxxp://drhalilciftci[.]com/cache/connection[.]php\r\nhxxps://dubailegaleagle[.]com/wp-includes/customize/connection[.]php\r\nhxxp://dubaistars[.]ae/engine1/connection[.]php\r\nhxxp://elitecaptains[.]ae/wp-includes/ID3/connection[.]php\r\nhxxp://egzotikshop[.]com/connection[.]php\r\nhxxp://ekrembahcekapili[.]com/vendor/composer/connection[.]php\r\nhxxp://erzincansrc[.]com/site/connection[.]php\r\nhxxp://www[.]gokhanturizmvetemizlik[.]com/wp-includes/connection[.]php\r\nhxxp://fitmentfurniture[.]com/wp-includes/certificates/connection[.]php\r\nhxxp://ftu965[.]com/wp-includes/theme-compat/connection[.]php\r\nhxxp://www[.]fullcircle-design[.]com/wp-includes/fonts/connection[.]php\r\nhxxps://galinusphysio[.]ae/connection[.]php\r\nhxxp://gulenapart[.]com/style/connection[.]php\r\nhxxp://ilaydapromosyon[.]com/components/com_content/connection[.]php\r\nhxxp://cittaslowturkiye[.]org/wp-admin/user/connection[.]php\r\nhxxp://cuneytugur[.]com[.]tr/language/connection[.]php\r\nhxxp://drhalilciftci[.]com/connection[.]php\r\nhxxp://hitupfitness[.]com/wp-includes/Requests/connection[.]php\r\nhxxp://homeofblinds[.]com/connection[.]php\r\nhxxp://iconnectuae[.]com/css/connection[.]php\r\nhxxp://ekerticaret[.]com/yonetim/connection[.]php\r\nhxxp://indulogistics[.]com/connection[.]php\r\nhxxp://elvantente[.]com/Elvan-Contact-Form-1/cfg-contactform-1/class/connection[.]php\r\nhttps://sec0wn.blogspot.com/2018/02/burping-on-muddywater.html\r\nPage 7 of 31\n\nhxxp://airsoft[.]net[.]tr/wp-includes/connection[.]php\r\nhxxp://airsoft[.]net[.]tr/wp-includes/random_compat/connection[.]php\r\nhxxp://airsoftpoligon[.]com[.]tr/admin/controller/localisation/connection[.]php\r\nhxxp://airsoftpoligon[.]com[.]tr/wp/connection[.]php\r\nhxxp://ajans362[.]com/admin/connection[.]php\r\nhxxp://akarnakliye[.]com[.]tr/111111111111111/template/connection[.]php\r\nhxxp://akgullerinsaat[.]com[.]tr/admin362ai/connection[.]php\r\nhxxp://akoluklu[.]com/arayuz/connection[.]php\r\nhxxp://aktivitedunyasi[.]com/assets/extras/owl/connection[.]php\r\nhxxp://alaca[.]com[.]tr/admin362alaca/connection[.]php\r\nhxxp://www[.]alcaninsaat[.]com[.]tr/_ajax/connection[.]php\r\nhxxp://aliacan[.]com/wp-includes/connection[.]php\r\nhxxp://alotur[.]com/bayi/mvc/connection[.]php\r\nhxxp://www[.]altinfiyatlari[.]org/connection[.]php\r\nhxxp://antsaninsaat[.]com[.]tr/admin362ai/connection[.]php\r\nhxxp://www[.]arabaoyunlari[.]org/admin/connection[.]php\r\nhxxp://www[.]enyenigelinlikmodelleri[.]net/connection[.]php\r\nhxxp://arasotokiralama[.]net/admin/connection[.]php\r\nhxxp://ariturkklima[.]com/wp-includes/connection[.]php\r\nhxxp://armadakizyurdu[.]com/admin362ay/connection[.]php\r\nhxxp://artibirinsaat[.]com[.]tr/admin362ai/ckeditor/_samples/connection[.]php\r\nhxxp://arzumceyiz[.]com/admin362ac/unit_testing/templates/connection[.]php\r\nhxxp://asaninsaat[.]com/administrator/components/com_templates/connection[.]php\r\nhxxp://asaryapi[.]com[.]tr/administrator/components/com_installer/connection[.]php\r\nhxxp://aseltech[.]com[.]tr/admin362at/connection[.]php\r\nhxxp://aseltech[.]dental/admin362at/connection[.]php\r\nhttps://sec0wn.blogspot.com/2018/02/burping-on-muddywater.html\r\nPage 8 of 31\n\nhxxp://asinsaat[.]org/css/fonts/connection[.]php\r\nhxxp://ataglobal[.]com[.]tr/admin362ag/connection[.]php\r\nhxxp://www[.]atimuzik[.]com[.]tr/wp-includes/connection[.]php\r\nhxxp://avsa-adasi[.]gen[.]tr/wp-includes/connection[.]php\r\nhxxp://avcihukukburosu[.]com/admin362ah/ckfinder/connection[.]php\r\nhxxp://ericouellettedev[.]com/css/connection[.]php\r\nhxxp://21bitcoin[.]io/blackjack/css/connection[.]php\r\nhxxp://alluhaybi[.]com[.]sa/wp-includes/widgets/connection[.]php\r\nhxxp://sexex[.]co[.]il/wp-includes/widgets/connection[.]php\r\nhxxp://mddesign[.]co[.]il/resources/views/layout/connection[.]php\r\nhxxp://www[.]igo3[.]co[.]il/wp-includes/widgets/connection[.]php\r\nhxxp://www[.]l-n[.]co[.]il/connection[.]php\r\nhxxp://www[.]l-n[.]co[.]il/wp-includes/widgets/connection[.]php\r\nhxxps://plush-toys[.]co[.]il/wp-includes/widgets/connection[.]php\r\nhxxp://yosifiko[.]co[.]il/wp-includes/widgets/connection[.]php\r\nhxxp://palmon-law[.]co[.]il/wp-includes/widgets/connection[.]php\r\nhxxp://www[.]mcb-law[.]co[.]il/wp-includes/widgets/connection[.]php\r\nhxxp://smart-sense[.]co[.]il/wp-includes/widgets/connection[.]php\r\nhxxp://azim[.]co[.]il/wp-includes/widgets/connection[.]php\r\nhxxps://dynamictours[.]co[.]il/components/connection[.]php\r\nhxxps://zahraty[.]com[.]sa/up/pub/media/yourstore/css/connection[.]php\r\nhxxps://www[.]wasa6h[.]com[.]sa/ws-admin/wy/skins/connection[.]php\r\nhxxps://www[.]wasa6h[.]com[.]sa/livezilla/images/geo/connection[.]php\r\nhxxps://jaras[.]sa/wp-includes/widgets/connection[.]php\r\nhxxps://zahraty[.]com[.]sa/up/app/design/frontend/connection[.]php\r\nhxxps://zahraty[.]com[.]sa/up/pub/media/yourstore/css/connection[.]php\r\nhttps://sec0wn.blogspot.com/2018/02/burping-on-muddywater.html\r\nPage 9 of 31\n\nhxxps://tge[.]sa/tgefs/includes/js/bootstrap/connection[.]php\r\nhxxps://emobe[.]eu/wp-includes/widgets/connection[.]php\r\nhxxp://vlgstal[.]ru/wp-includes/widgets/connection[.]php\r\nhxxps://richmen[.]az/upgrades/connection[.]php\r\nhxxp://bg[.]com[.]tr/j3/components/com_ajax/connection[.]php\r\nhxxp://www[.]rjsoftware[.]com/wp-content/themes/twentyseventeen/assets/css/connection[.]php\r\nhxxps://www[.]freesteamwalletcode[.]com/wp-content/languages/connection[.]php\r\nhxxps://www[.]icycheats[.]com/wp-includes/widgets/connection[.]php\r\nhxxp://mycar[.]ge/prava/jplot/docs/files/plugins/connection[.]php\r\nhxxps://goyalsoftech[.]com/css/imports/shortcodes/connection[.]php\r\nhxxps://pushconsole[.]com/assets/fonts/icomoon/connection[.]php\r\nhxxps://www[.]easykeysoftware[.]com/media/image/00/0d/9a/connection[.]php\r\nhxxp://mepure[.]com/connection[.]php\r\nhxxps://www[.]1n2r[.]com//wp-content/connection[.]php\r\nhxxps://www[.]1n2r[.]com//wp-content/themes/twentysixteen/inc/connection[.]php\r\nhxxp://bek[.]ae/wp-includes//connection[.]php\r\nhxxp://bek[.]ae/wp-includes//IXR/connection[.]php?lib=curl\r\nhxxps://climateplus[.]ae/wp-content/themes/tyche/connection[.]php\r\nhxxps://climateplus[.]ae/wp-content/themes/tyche/woocommerce/connection[.]php\r\nhxxp://lohuis[.]ae/wp-includes/widgets/connection[.]php\r\nhxxp://lohuis[.]ae//wp-includes/random_compat/connection[.]php\r\nhxxps://mistingfan[.]ae/wp-content/themes/twentyfifteen/connection[.]php\r\nhxxps://mistingfan[.]ae/wp-content/themes/mts_schema//connection[.]php\r\nhxxps://outdoorac[.]ae/wp-includes/ID3/connection[.]php\r\nhxxps://outdoorac[.]ae/wp-includes/customize/connection[.]php\r\nhxxps://outdoorcooling[.]ae/wp-includes/ID3/connection[.]php\r\nhttps://sec0wn.blogspot.com/2018/02/burping-on-muddywater.html\r\nPage 10 of 31\n\nhxxps://outdoorcooling[.]ae/wp-includes/Text/connection[.]php\r\nhxxp://patioheater[.]ae/wp-content/plugins/connection[.]php\r\nhxxp://patioheater[.]ae/wp-includes/connection[.]php\r\nhxxps://hvls[.]ae/wp-includes/SimplePie/connection[.]php\r\nhxxps://hvls[.]ae/wp-includes/SimplePie/Parse/connection[.]php\r\nhxxp://cool-group[.]ae/wp-includes/customize/connection[.]php\r\nhxxp://cool-group[.]ae/wp-includes/certificates/connection[.]php\r\nhxxp://adambaluch[.]ae/wp-includes/pomo/connection[.]php\r\nhxxp://adambaluch[.]ae/wp-includes/customize/connection[.]php\r\nhxxp://beachroad[.]ae/wp-includes/connection[.]php\r\nhxxp://beachroad[.]ae/wp-includes/Requests/Utility/connection[.]php\r\nhxxp://castaldiart[.]com/wp-includes/Requests/connection[.]php\r\nhxxp://castaldiart[.]com/wp-includes/Requests/Transport/connection[.]php\r\nhxxp://elevate[.]ae/wp-includes/IXR/connection[.]php\r\nhxxp://elevate[.]ae/wp-includes/customize/connection[.]php\r\nhxxp://koldpressjuice[.]com/wp-includes/IXR/connection[.]php\r\nhxxp://koldpressjuice[.]com/wp-includes/SimplePie/XML/connection[.]php\r\nhxxp://satwa[.]ae/wp-includes/images/connection[.]php\r\nhxxp://satwa[.]ae/wp-includes/rest-api/connection[.]php\r\nhxxp://soccertotsuae[.]com/wp-includes/Requests/Cookie/connection[.]php\r\nhxxp://soccertotsuae[.]com/wp-includes/Requests/Exception/connection[.]php\r\nhxxp://souqwalls[.]com/wp-includes/random_compat/connection[.]php\r\nhxxp://souqwalls[.]com/wp-includes/theme-compat/connection[.]php\r\nhxxp://vintage[.]ae/wp-includes/random_compat/connection[.]php\r\nhxxp://vintage[.]ae/wp-includes/pomo/connection[.]php\r\nhxxp://yogakidsuae[.]com/wp-includes/SimplePie/connection[.]php\r\nhttps://sec0wn.blogspot.com/2018/02/burping-on-muddywater.html\r\nPage 11 of 31\n\nhxxp://yogakidsuae[.]com/wp-includes/SimplePie/XML/connection[.]php\r\nhxxp://binham[.]com/oxygen/connection[.]php\r\nhxxp://binham[.]com/artesia/connection[.]php\r\nhxxp://binhamgroup[.]com/Stopped/connection[.]php\r\nhxxp://binhamgroup[.]com/press/connection[.]php\r\nhxxp://mohamedbinham[.]com/wp-includes/connection[.]php\r\nhxxp://mohamedbinham[.]com/wp-includes/IXR/connection[.]php\r\nhxxp://thebedspace[.]com/wp-includes/Requests/connection[.]php\r\nhxxp://thebedspace[.]com/wp-includes/Requests/Response/connection[.]php\r\nhxxp://anythingispossible[.]world/wp-includes/IXR/connection[.]php\r\nhxxp://anythingispossible[.]world/wp-includes/Text/connection[.]php\r\nhxxp://ctteknik[.]com[.]tr/wp-content/themes/one-page/connection[.]php\r\nhxxp://ctteknik[.]com[.]tr/wp-includes/connection[.]php\r\nhxxp://acililan[.]net/libs/connection[.]php\r\nhxxp://stmgage[.]com/system/engine/connection[.]php\r\nhxxp://stmgage[.]com/system/config/connection[.]php\r\nhxxp://papyonplus[.]tv/css/connection[.]php\r\nhxxp://lavastandirustasi[.]com/includes/connection[.]php\r\nhxxp://www[.]cigercihamza[.]com/wp-content/themes/twentyfifteen/connection[.]php\r\nhxxp://www[.]cigercihamza[.]com/wp-includes/connection[.]php\r\nhxxps://www[.]3bulut[.]net/wp-content/themes/arkahost/connection[.]php\r\nhxxps://www[.]3bulut[.]net/hizmetler/lang/connection[.]php\r\nhxxp://gocekdaloshotel[.]com/sayfalar/connection[.]php\r\nhxxp://emrahucar[.]com[.]tr/wp-content/themes/rokophoto-lite/connection[.]php\r\nhxxp://emrahucar[.]com[.]tr/wp-includes/connection[.]php\r\nhxxp://www[.]fircasizaracyikama[.]com/wp-content/themes/twentyfifteen/connection[.]php\r\nhttps://sec0wn.blogspot.com/2018/02/burping-on-muddywater.html\r\nPage 12 of 31\n\nhxxp://www[.]fircasizaracyikama[.]com/wp-includes/connection[.]php\r\nhxxps://www[.]filthymindsco[.]com/wp-content/themes/twentyfifteen/inc/connection[.]php\r\nhxxps://www[.]filthymindsco[.]com/wp-includes/connection[.]php\r\nhxxp://kedidirkedi[.]com/wp-includes/connection[.]php\r\nhxxp://www[.]salonalara[.]com/wp-content/themes/twentyfifteen/inc/connection[.]php\r\nhxxp://www[.]salonalara[.]com/wp-includes/connection[.]php\r\nhxxp://www[.]ogreniver[.]com/wp-includes/connection[.]php\r\nhxxp://turhantarim[.]com/lang/connection[.]php\r\nhxxp://turhantarim[.]com/ik/inc/connection[.]php\r\nhxxp://www[.]mersinyedirenk[.]org/wp-content/themes/oxygen/connection[.]php\r\nhxxp://gayrimenkulvera[.]com/wp-content/themes/one-page/connection[.]php\r\nhxxp://gayrimenkulvera[.]com/wp-includes/connection[.]php\r\nhxxp://electrotoolbox[.]com/wp-content/themes/rowe/connection[.]php\r\nhxxp://www[.]cesikacatisistemleri[.]com/wp-content/themes/safirkurumsal/connection[.]php\r\nhxxp://www[.]cesikacatisistemleri[.]com/wp-includes/connection[.]php\r\nhxxp://almirayapim[.]com/wp-includes/connection[.]php\r\nhxxp://www[.]strancamagic[.]com/en/wp-includes/connection[.]php\r\nhxxp://raptiye[.]co/wp-includes/connection[.]php\r\nhxxp://safakahsap[.]com/fonksiyonlar/connection[.]php\r\nhxxp://safakahsap[.]com/resimler/semboller/connection[.]php\r\nhxxp://bursadanilan[.]com/iyzipay/samples/connection[.]php\r\nhxxp://www[.]cavgun[.]com/wp-includes/connection[.]php\r\nhxxp://ilanevim[.]com/kvitrin/connection[.]php\r\nhxxp://yelpazeinsaat[.]com[.]tr/plugins/finder/content/connection[.]php\r\nhxxp://kirkagac[.]bel[.]tr/sayfalar/connection[.]php\r\nhxxp://kirkagac[.]bel[.]tr/assets/fonts/connection[.]php\r\nhttps://sec0wn.blogspot.com/2018/02/burping-on-muddywater.html\r\nPage 13 of 31\n\nhxxp://paybaskulu[.]com/fht/connection[.]php\r\nhxxp://www[.]ozsezerler[.]com/_inc/connection[.]php\r\nhxxp://www[.]ozsezerler[.]com/en/connection[.]php\r\nhxxp://www[.]yapiborsasi[.]com/libs/connection[.]php\r\nhxxp://www[.]yapiborsasi[.]com/kvitrin/connection[.]php\r\nhxxps://boyaci-ustasi[.]com/wp-includes/connection[.]php\r\nhxxps://boyaci-ustasi[.]com/wp-content/themes/misty-lake/connection[.]php\r\nhxxp://www[.]altingunes[.]com/wp-includes/customize/connection[.]php\r\nhxxp://tamamsin[.]com/libs/connection[.]php\r\nhxxp://atlasins[.]com[.]tr/wp-includes/connection[.]php\r\nhxxp://atlasins[.]com[.]tr/wp-includes/connection[.]php\r\nhxxp://ilkerreklamcilik[.]com/Joomla_site/includes/connection[.]php\r\nhxxp://luleburgazzob[.]org[.]tr/panel/plugins/ckeditor/plugins/link/dialogs/connection[.]php\r\nhxxp://burakgozutok[.]com/wp-content/themes/twentyfourteen/connection[.]php\r\nhxxp://burakgozutok[.]com/wp-includes/connection[.]php\r\nhxxp://ekayapi[.]org/inc/connection[.]php\r\nhxxp://ekayapi[.]org/upload/connection[.]php\r\nhxxp://gdijital[.]com/libraries/connection[.]php\r\nhxxp://rumelipeyzaj[.]com/panel/connection[.]php\r\nhxxp://www[.]alpenfitil[.]com/wp-includes/connection[.]php\r\nhxxp://www[.]alpenfitil[.]com/wp-includes/connection[.]php\r\nhxxp://kindervilla[.]at/team/connection[.]php\r\nhxxp://www[.]ranzamodellerim[.]com/wp-content/plugins/contact-form-7/connection[.]php\r\nhxxp://www[.]metoikos-trade[.]com/wp-content/themes/twentyfifteen/connection[.]php\r\nhxxp://tecnocoffee[.]com[.]tr/wp-content/themes/enlighten/connection[.]php\r\nhxxp://tecnocoffee[.]com[.]tr/wp-includes/connection[.]php\r\nhttps://sec0wn.blogspot.com/2018/02/burping-on-muddywater.html\r\nPage 14 of 31\n\nhxxps://www[.]bedavasat[.]com/export/connection[.]php\r\nhxxps://www[.]bedavasat[.]com/iyzipay/src/Iyzipay/connection[.]php\r\nhxxps://www[.]bedavasat[.]com/fileserver/connection[.]php\r\nhxxp://ustaariyorum[.]com[.]tr/wp-content/themes/wpfirma/connection[.]php\r\nhxxp://ustaariyorum[.]com[.]tr/wp-includes/connection[.]php\r\nhxxp://escapefromsofa[.]com/theme/efs/connection[.]php\r\nhxxp://escapefromsofa[.]com/ajax/connection[.]php\r\nhxxp://ozmetalpen[.]com/wp-includes/connection[.]php\r\nhxxp://nevzatsolmazinsaat[.]com/wp-content/themes/twentyfifteen/connection[.]php\r\nhxxp://nevzatsolmazinsaat[.]com/wp-includes/connection[.]php\r\nhxxp://standartdogalgaz[.]com/wp-includes/connection[.]php\r\nhxxp://startr[.]com/system/library/connection[.]php\r\nhxxp://www[.]karavanseyahat[.]com/wp-content/themes/twentyfifteen/connection[.]php\r\nhxxp://reklambasvurusu[.]com/sistem/connection[.]php\r\nhxxp://reklambasvurusu[.]com/!ercer2001/sistem/connection[.]php\r\nhxxp://www[.]emlakbizden[.]com/libs/connection[.]php\r\nhxxp://rentacarline[.]com/wp-content/themes/twentyfifteen/connection[.]php\r\nhxxp://www[.]pergolatentefiyatlari[.]com/wp-includes/connection[.]php\r\nhxxp://www[.]oroazteca[.]net/wp-includes/connection[.]php\r\nhxxp://markizorganizasyon[.]com/wp-includes/connection[.]php\r\nhxxp://markizorganizasyon[.]com/wp-content/themes/twentyfifteen/connection[.]php\r\nhxxp://akin[.]me/wp-includes/connection[.]php\r\nhxxp://akin[.]me/wp-content/themes/founder/connection[.]php\r\nhxxp://www[.]bogazturu[.]net/includes/connection[.]php\r\nhxxp://onurlergayrimenkul[.]com/application/language/english/connection[.]php\r\nhxxp://www[.]a-zgrup[.]com/wp-content/themes/twentyfifteen/connection[.]php\r\nhttps://sec0wn.blogspot.com/2018/02/burping-on-muddywater.html\r\nPage 15 of 31\n\nhxxp://www[.]a-zgrup[.]com/wp-includes/connection[.]php\r\nhxxp://matmazel-gelinlik[.]com/wp-content/themes/twentyfifteen/connection[.]php\r\nhxxp://www[.]gokkubbe[.]biz/wp-includes/connection[.]php\r\nhxxp://eraslan[.]com[.]tr/en/about/connection[.]php\r\nhxxp://eraslan[.]com[.]tr/en/history/assets/nokta/css/connection[.]php\r\nhxxp://www[.]hibedanis[.]com/en/_ajax/connection[.]php\r\nhxxp://www[.]hibedanis[.]com/en/_inc/connection[.]php\r\nhxxp://yildizgokart[.]com/wp-content/plugins/contact-form-7/includes/connection[.]php\r\nhxxp://cinarli[.]com/catering/img/connection[.]php\r\nhxxp://cinarli[.]com/restaurant/captcha/connection[.]php\r\nhxxp://alyanslife[.]com/wp-content/themes/twentyfifteen/connection[.]php\r\nhxxp://alyanslife[.]com/wp-includes/connection[.]php\r\nhxxp://www[.]hibedanis[.]com/admin/connection[.]php\r\nhxxp://www[.]hibedanis[.]com/en/_inc/connection[.]php\r\nhxxp://yildizgokart[.]com/wp-content/languages/plugins/connection[.]php\r\nhxxp://acililan[.]net/libs/connection[.]php\r\nhxxp://stmgage[.]com/system/engine/connection[.]php\r\nhxxp://novusglobal[.]us/templates/zoner/connection[.]php\r\nhxxp://1111crm[.]com/3Party/ckeditor/plugins/bidi/lang/connection[.]php\r\nhxxp://1111crm[.]com/ESKI/loginbox/system/connection[.]php\r\nhxxp://rehberhds[.]com/wp-includes/connection[.]php\r\nhxxp://ngvisco[.]com/wp-includes/connection[.]php\r\nhxxp://ngvisco[.]com/wp-content/themes/betheme/connection[.]php\r\nhxxp://kursunkalemhoca[.]com/wp-content/themes/twentyseventeen/connection[.]php\r\nhxxps://www[.]asortie[.]com/blog/wp-content/themes/colormag/connection[.]php\r\nhxxps://www[.]asortie[.]com/blog/wp-includes/connection[.]php\r\nhttps://sec0wn.blogspot.com/2018/02/burping-on-muddywater.html\r\nPage 16 of 31\n\nhxxps://bayanhobisi[.]com/wp-content/themes/twentyfifteen/connection[.]php\r\nhxxps://bayanhobisi[.]com/wp-includes/connection[.]php\r\nhxxp://3eyonetim[.]com/wp-includes/connection[.]php\r\nhxxp://3eyonetim[.]com/wp-content/themes/twentyfifteen/connection[.]php\r\nhxxp://derinbutikotel[.]com/templates/beez3/language/en-GB/connection[.]php\r\nhxxp://minitalya[.]com/wp-content/languages/plugins/connection[.]php\r\nhxxp://www[.]armateknolojimerkezi[.]com/wp-includes/pomo/connection[.]php\r\nhxxp://www[.]armateknolojimerkezi[.]com/wp-content/languages/plugins/connection[.]php\r\nhxxp://www[.]eogren[.]me/wp-includes/widgets/connection[.]php\r\nhxxp://www[.]eogren[.]me/wp-content/languages/plugins/connection[.]php\r\nhxxp://www[.]inalhukukburosu[.]com/wp-includes/widgets/connection[.]php\r\nhxxp://www[.]inalhukukburosu[.]com/wp-content/languages/plugins/connection[.]php\r\nhxxp://www[.]osmaniyesevgi[.]com[.]tr/wp-includes/pomo/connection[.]php\r\nhxxp://www[.]osmaniyesevgi[.]com[.]tr/wp-content/languages/plugins/connection[.]php\r\nhxxp://ercekagit[.]com/wp-includes/widgets/connection[.]php\r\nhxxp://ercekagit[.]com/wp-content/languages/plugins/connection[.]php\r\nhxxp://lubesoltr[.]com/images/connection[.]php\r\nhxxp://watergreen[.]com[.]tr/pages/inc/connection[.]php\r\nhxxp://watergreen[.]com[.]tr/lib/ckeditor/plugins/a11yhelp/dialogs/connection[.]php\r\nhxxp://tamirdeyiz[.]com/plugins/extension/joomla/connection[.]php\r\nhxxp://tamirdeyiz[.]com/language/tr-TR/connection[.]php\r\nhxxp://www[.]finansalkredi[.]com/wp-includes/widgets/connection[.]php\r\nhxxp://www[.]finansalkredi[.]com/wp-content/languages/plugins/connection[.]php\r\nhxxps://dogruwebtasarim[.]com/ortak/editable/bootstrap3/1[.]5[.]1/bootstrap3-editable/css/connection[.]php\r\nhxxps://dogruwebtasarim[.]com/ortak/seourl/1[.]7[.]1/connection[.]php\r\nhxxp://er-emmakine[.]com[.]tr/admin/include/connection[.]php\r\nhttps://sec0wn.blogspot.com/2018/02/burping-on-muddywater.html\r\nPage 17 of 31\n\nhxxp://er-emmakine[.]com[.]tr/admin/chat/documentation/css/connection[.]php\r\nhxxp://turanlarcitsistemleri[.]com/wp-includes/pomo/connection[.]php\r\nhxxp://turanlarcitsistemleri[.]com/wp-content/languages/plugins/connection[.]php\r\nhxxp://www[.]uzaktanogrenin[.]com/phpmailer/connection[.]php\r\nhxxp://www[.]uzaktanogrenin[.]com/css/presets/connection[.]php\r\nhxxp://e-learning[.]secilenlernetwork[.]com/phpmailer/connection[.]php\r\nhxxp://e-learning[.]secilenlernetwork[.]com/yonetim/ckeditor/plugins/about/dialogs/connection[.]php\r\nhxxp://luleburgazvinc[.]com/mail/connection[.]php\r\nhxxp://luleburgazvinc[.]com/panel/plugins/ckeditor/connection[.]php\r\nhxxp://www[.]karamesetarim[.]com/wp-includes/widgets/connection[.]php\r\nhxxp://www[.]karamesetarim[.]com/wp-content/languages/plugins/connection[.]php\r\nhxxp://teknodizayn[.]net/domain/js/connection[.]php\r\nhxxp://teknodizayn[.]net/baglan/facebook/src/connection[.]php\r\nhxxp://www[.]hankimya[.]com/wp-includes/pomo/connection[.]php\r\nhxxp://www[.]hankimya[.]com/wp-content/languages/plugins/connection[.]php\r\nhxxp://hasatvet[.]com[.]tr/ekatalog/lib/connection[.]php\r\nhxxp://hasatvet[.]com[.]tr/insantr/language/connection[.]php\r\nhxxp://emelcekici[.]com/engine/connection[.]php\r\nhxxp://emelcekici[.]com/engine/ajax/connection[.]php\r\nhxxp://tamer[.]info/dle/engine/ajax/connection[.]php\r\nhxxp://tamer[.]info/dle/engine/connection[.]php\r\nhxxp://seyekanakliyat[.]com/cgi-bin/connection[.]php\r\nhxxp://www[.]sendogansevda[.]com/wp-includes/widgets/connection[.]php\r\nhxxp://www[.]sendogansevda[.]com/wp-content/languages/plugins/connection[.]php\r\nhxxp://viranlar[.]com/func/connection[.]php\r\nhxxp://viranlar[.]com/fancybox/connection[.]php\r\nhttps://sec0wn.blogspot.com/2018/02/burping-on-muddywater.html\r\nPage 18 of 31\n\nhxxp://mimart1984[.]com/panel/plugins/chartjs/connection[.]php\r\nhxxp://mimart1984[.]com/panel/dist/css/skins/connection[.]php\r\nhxxp://nurbahcemakinalari[.]com/epiksel/epiksel_admin_shortcuts/css/connection[.]php\r\nhxxp://nurbahcemakinalari[.]com/override/export/admin/controller/common/connection[.]php\r\nhxxp://safacaliskan[.]com/wp-includes/widgets/connection[.]php\r\nhxxp://safacaliskan[.]com/wp-content/languages/plugins/connection[.]php\r\nhxxps://www[.]eimza[.]gen[.]tr/images/yedek/connection[.]php\r\nhxxps://www[.]eimza[.]gen[.]tr/class/mail/connection[.]php\r\nhxxp://organigiz[.]org/wp-includes/widgets/connection[.]php\r\nhxxp://organigiz[.]org/wp-content/languages/plugins/connection[.]php\r\nhxxp://www[.]tekirdagbulten[.]com/wp-includes/widgets/connection[.]php\r\nhxxp://www[.]tekirdagbulten[.]com/wp-content/languages/plugins/connection[.]php\r\nhxxp://arkadasariyoruz[.]com/reklamlar/connection[.]php\r\nhxxp://arkadasariyoruz[.]com/mudur/connection[.]php\r\nhxxp://mywishlistapp[.]com/sanal/fonts/codropsicons/connection[.]php\r\nhxxp://mywishlistapp[.]com/kaynak/dist/stylesheets/connection[.]php\r\nhxxp://tafitur[.]com/muhasebe/plugins/chart/connection[.]php\r\nhxxp://tafitur[.]com/muhasebe/plugins/advanced-datatable/css/connection[.]php\r\nhxxp://www[.]ddcreklam[.]com/wp-content/languages/plugins/connection[.]php\r\nhxxp://www[.]ddcreklam[.]com/wp-includes/widgets/connection[.]php\r\nhxxp://gulucuk[.]com[.]tr/panel/assest/images/connection[.]php\r\nhxxp://gulucuk[.]com[.]tr/rs-plugin/assets/connection[.]php\r\nhxxp://fatihguvenmotor[.]com/wp-includes/widgets/connection[.]php\r\nhxxp://fatihguvenmotor[.]com/wp-content/languages/plugins/connection[.]php\r\nhxxp://banaherseylazim[.]com/catalog/view/javascript/jquery/connection[.]php\r\nhxxp://banaherseylazim[.]com/system/config/connection[.]php\r\nhttps://sec0wn.blogspot.com/2018/02/burping-on-muddywater.html\r\nPage 19 of 31\n\nhxxp://nikahsepetim[.]com/catalog/view/javascript/jquery/connection[.]php\r\nhxxp://nikahsepetim[.]com/blog/wp-includes/widgets/connection[.]php\r\nhxxp://www[.]ozankaratas[.]com/wp-includes/widgets/connection[.]php\r\nhxxp://www[.]ozankaratas[.]com/wp-content/languages/plugins/connection[.]php\r\nhxxp://salonaltinmakas[.]com/cgi-bin/connection[.]php\r\nhxxp://salonaltinmakas[.]com/assets/js/connection[.]php\r\nhxxp://buldurgrup[.]com/plugins/captcha/recaptcha/connection[.]php\r\nhxxp://buldurgrup[.]com/libraries/cms/application/connection[.]php\r\nhxxp://gebekulubu[.]com/fonts/alice/connection[.]php\r\nhxxp://gebekulubu[.]com/core/cpstyles/vBulletin_5_Default/connection[.]php\r\nhxxp://isikpolyester[.]com/css/custom-theme/images/connection[.]php\r\nhxxp://isikpolyester[.]com/graphics/iletisim/connection[.]php\r\nhxxp://bayramturgutnakliyat[.]com[.]tr/components/com_ajax/connection[.]php\r\nhxxp://bayramturgutnakliyat[.]com[.]tr/libraries/cms/component/router/rules/connection[.]php\r\nhxxp://perdemis[.]com/panel/ckeditor/_samples/adobeair/connection[.]php\r\nhxxp://perdemis[.]com/panel/ckeditor/plugins/forms/dialogs/connection[.]php\r\nhxxp://ersagurunlerisatis[.]com/cgi-bin/connection[.]php\r\nhxxp://ersagurunlerisatis[.]com/style/bakim/tools/socicon/font/connection[.]php\r\nhxxp://naturagro[.]com[.]tr/calisma/assets/css/connection[.]php\r\nhxxp://naturagro[.]com[.]tr/calisma/modules/images/prettyPhoto/dark_rounded/connection[.]php\r\nhxxps://www[.]owletmedikal[.]com/manager/js/advanced-datatable/css/connection[.]php\r\nhxxps://www[.]owletmedikal[.]com/manager/php-activerecord/examples/orders/models/connection[.]php\r\nhxxps://yemekler[.]com[.]tr/wp-includes/Requests/Exception/hxxp/connection[.]php\r\nhxxps://yemekler[.]com[.]tr/wp-content/languages/plugins/connection[.]php\r\nhxxps://pentilon[.]com/wp-includes/widgets/connection[.]php\r\nhxxps://pentilon[.]com/wp-content/languages/plugins/connection[.]php\r\nhttps://sec0wn.blogspot.com/2018/02/burping-on-muddywater.html\r\nPage 20 of 31\n\nhxxps://bestpa[.]com[.]tr/catalog/view/theme/default/stylesheet/connection[.]php\r\nhxxps://bestpa[.]com[.]tr/catalog/view/theme/default/stylesheet/connection[.]php\r\nhxxp://eylulprefabrik[.]com/images/connection[.]php\r\nhxxp://eylulprefabrik[.]com/cgi-bin/connection[.]php\r\nhxxp://kralicemmasaj[.]com/layouts/libraries/cms/html/bootstrap/connection[.]php\r\nhxxp://www[.]nilgunakkok[.]com/wp-includes/widgets/connection[.]php\r\nhxxp://www[.]orgutigisimodelleri[.]com/wp-includes/pomo/connection[.]php\r\nhxxp://anadolutente[.]com[.]tr/js/connection[.]php\r\nhxxp://anadolutente[.]com[.]tr/fonts/connection[.]php\r\nhxxp://entpsoft[.]com/cgi-bin/connection[.]php\r\nhxxp://entpsoft[.]com/LISP-SURELERI/connection[.]php\r\nhxxp://besiktasgorselsanatlar[.]com/loginbox/app/connection[.]php\r\nhxxp://besiktasgorselsanatlar[.]com/loginbox/3party/ckeditor/plugins/a11yhelp/dialogs/connection[.]php\r\nhxxp://ilkadim[.]k12[.]tr/media/contacts/connection[.]php\r\nhxxp://senollarturizm[.]com[.]tr/vendor/scripts/jquery/connection[.]php\r\nhxxp://arabaemlak[.]com/magaza/cgi-bin/connection[.]php\r\nhxxp://www[.]ankarahaliyikamafirmalari[.]web[.]tr/wp-includes/widgets/connection[.]php\r\nhxxp://www[.]ankarahaliyikamafirmalari[.]web[.]tr/wp-includes/js/jquery/ui/connection[.]php\r\nhxxp://en[.]nordiksimit[.]org/wp-includes/widgets/connection[.]php\r\nhxxp://en[.]nordiksimit[.]org/wp-includes/js/jquery/ui/connection[.]php\r\nhxxp://dyosanayiboyalari[.]com/cgi-bin/connection[.]php\r\nhxxp://www[.]ufukdesign[.]com/wp-includes/js/jquery/ui/connection[.]php\r\nhxxp://mehmetak[.]in/cgi-bin/connection[.]php\r\nhxxp://teknobi[.]net/include/payu/CLASSES/connection[.]php\r\nhxxp://www[.]ilanbas[.]com/panel/js/connection[.]php\r\nhxxp://ilanbas[.]com//js/bxslider/images/connection[.]php\r\nhttps://sec0wn.blogspot.com/2018/02/burping-on-muddywater.html\r\nPage 21 of 31\n\nhxxp://gunluoglumobilya[.]com/system/config/connection[.]php\r\nhxxp://gunluoglumobilya[.]com/catalog/view/javascript/jquery/ui/connection[.]php\r\nhxxp://www[.]oyun16[.]com/libs/plugins/connection[.]php\r\nhxxp://www[.]oyun16[.]com/den/css/connection[.]php\r\nhxxp://papyonplus[.]tv/dummy/connection[.]php\r\nhxxp://papyonplus[.]tv/css/connection[.]php\r\nhxxp://lavastandirustasi[.]com/includes/connection[.]php\r\nhxxp://lavastandirustasi[.]com/cli/connection[.]php\r\nhxxp://www[.]cigercihamza[.]com/wp-content/themes/twentyfifteen/connection[.]php\r\nhxxp://www[.]cigercihamza[.]com/wp-includes/connection[.]php\r\nhxxps://www[.]3bulut[.]net/wp-content/themes/arkahost/connection[.]php\r\nhxxps://www[.]3bulut[.]net/hizmetler/lang/connection[.]php\r\nhxxp://akinbilgisayarumraniye[.]com/inc/connection[.]php\r\nhxxp://akinbilgisayarumraniye[.]com/sistem/elfinder/connectors/php/connection[.]php\r\nhxxp://gocekdaloshotel[.]com/dil/connection[.]php\r\nhxxp://gocekdaloshotel[.]com/sayfalar/connection[.]php\r\nhxxp://emrahucar[.]com[.]tr/wp-content/themes/rokophoto-lite/connection[.]php\r\nhxxp://emrahucar[.]com[.]tr/wp-includes/connection[.]php\r\nhxxp://www[.]fircasizaracyikama[.]com/wp-content/themes/twentyfifteen/connection[.]php\r\nhxxp://www[.]fircasizaracyikama[.]com/wp-includes/connection[.]php\r\nhxxps://www[.]filthymindsco[.]com/wp-content/themes/twentyfifteen/inc/connection[.]php\r\nhxxps://www[.]filthymindsco[.]com/wp-includes/connection[.]php\r\nhxxp://www[.]bulutuzer[.]com/wp-content/themes/twentyfifteen/connection[.]php\r\nhxxp://www[.]bulutuzer[.]com/wp-includes/connection[.]php\r\nhxxp://mavioksidan[.]net/admin/view/javascript/openbay/css/connection[.]php\r\nhxxp://mavioksidan[.]net/catalog/model/affiliate/connection[.]php\r\nhttps://sec0wn.blogspot.com/2018/02/burping-on-muddywater.html\r\nPage 22 of 31\n\nhxxp://halilbalyapi[.]com/includes/connection[.]php\r\nhxxp://halilbalyapi[.]com/language/en-GB/connection[.]php\r\nhxxp://kedidirkedi[.]com/wp-content/themes/twentyfifteen/connection[.]php\r\nhxxp://kedidirkedi[.]com/wp-includes/connection[.]php\r\nhxxp://www[.]salonalara[.]com/wp-content/themes/twentyfifteen/inc/connection[.]php\r\nhxxp://www[.]salonalara[.]com/wp-includes/connection[.]php\r\nhxxp://dsmartbursa[.]net/_frame/connection[.]php\r\nhxxp://dsmartbursa[.]net/_iserv/form2mail/connection[.]php\r\nhxxp://www[.]ogreniver[.]com/wp-content/themes/metro-creativex/connection[.]php\r\nhxxp://www[.]ogreniver[.]com/wp-includes/connection[.]php\r\nhxxp://mangalaburada[.]com/wp-content/themes/idoneita/connection[.]php\r\nhxxp://mangalaburada[.]com/wp-includes/connection[.]php\r\nhxxp://www[.]ozeliletisim[.]com[.]tr/wp-includes/connection[.]php\r\nhxxp://www[.]pastacikadin[.]com/wp-content/themes/bulan/connection[.]php\r\nhxxp://www[.]pastacikadin[.]com/wp-includes/connection[.]php\r\nhxxp://turhantarim[.]com/lang/connection[.]php\r\nhxxp://turhantarim[.]com/ik/inc/connection[.]php\r\nhxxp://www[.]mersinyedirenk[.]org/wp-content/themes/oxygen/connection[.]php\r\nhxxp://www[.]mersinyedirenk[.]org/wp-includes/connection[.]php\r\nhxxp://gayrimenkulvera[.]com/wp-content/themes/one-page/connection[.]php\r\nhxxp://gayrimenkulvera[.]com/wp-includes/connection[.]php\r\nhxxp://projemsoft[.]com/includes/twitter/connection[.]php\r\nhxxp://projemsoft[.]com/js/connection[.]php\r\nhxxp://electrotoolbox[.]com/wp-content/themes/rowe/connection[.]php\r\nhxxp://electrotoolbox[.]com/wp-includes/connection[.]php\r\nhxxp://www[.]cesikacatisistemleri[.]com/wp-content/themes/safirkurumsal/connection[.]php\r\nhttps://sec0wn.blogspot.com/2018/02/burping-on-muddywater.html\r\nPage 23 of 31\n\nhxxp://www[.]cesikacatisistemleri[.]com/wp-includes/connection[.]php\r\nhxxp://almirayapim[.]com/wp-content/themes/minamaze/connection[.]php\r\nhxxp://almirayapim[.]com/wp-includes/connection[.]php\r\nhxxp://www[.]strancamagic[.]com/en/wp-content/themes/twentyfifteen/connection[.]php\r\nhxxp://www[.]strancamagic[.]com/en/wp-includes/connection[.]php\r\nhxxp://www[.]marufymm[.]com/wp-content/themes/twentyfifteen/connection[.]php\r\nhxxp://www[.]marufymm[.]com/wp-includes/connection[.]php\r\nhxxp://ayyildizmimari[.]com/ders/inc/connection[.]php\r\nhxxp://ayyildizmimari[.]com/bakim/connection[.]php\r\nhxxp://raptiye[.]co/wp-content/themes/illdy/connection[.]php\r\nhxxp://raptiye[.]co/wp-includes/connection[.]php\r\nhxxp://safakahsap[.]com/fonksiyonlar/connection[.]php\r\nhxxp://safakahsap[.]com/resimler/semboller/connection[.]php\r\nhxxp://bursadanilan[.]com/eski/libs/connection[.]php\r\nhxxp://bursadanilan[.]com/iyzipay/samples/connection[.]php\r\nhxxp://www[.]cavgun[.]com/wp-content/themes/tema/connection[.]php\r\nhxxp://www[.]cavgun[.]com/wp-includes/connection[.]php\r\nhxxp://www[.]ilanevim[.]com/mobil/connection[.]php\r\nhxxp://ilanevim[.]com/kvitrin/connection[.]php\r\nhxxp://yelpazeinsaat[.]com[.]tr/plugins/finder/content/connection[.]php\r\nhxxp://yelpazeinsaat[.]com[.]tr/yeni/plugins/finder/content/connection[.]php\r\nhxxp://safasengezer[.]com[.]tr/wp-includes/connection[.]php\r\nhxxp://kirkagac[.]bel[.]tr/sayfalar/connection[.]php\r\nhxxp://kirkagac[.]bel[.]tr/assets/fonts/connection[.]php\r\nhxxp://7likurbanbaskulu[.]com/hassas/connection[.]php\r\nhxxp://7likurbanbaskulu[.]com/tartim/connection[.]php\r\nhttps://sec0wn.blogspot.com/2018/02/burping-on-muddywater.html\r\nPage 24 of 31\n\nhxxp://paybaskulu[.]com/tartim/connection[.]php\r\nhxxp://paybaskulu[.]com/fht/connection[.]php\r\nhxxp://kurbanhissebaskulu[.]net/barkodlular/connection[.]php\r\nhxxp://kurbanhissebaskulu[.]net/tartim/connection[.]php\r\nhxxp://www[.]ozsezerler[.]com/_inc/connection[.]php\r\nhxxp://www[.]ozsezerler[.]com/en/connection[.]php\r\nhxxp://www[.]yapiborsasi[.]com/libs/connection[.]php\r\nhxxp://www[.]yapiborsasi[.]com/kvitrin/connection[.]php\r\nhxxps://boyaci-ustasi[.]com/wp-includes/connection[.]php\r\nhxxps://boyaci-ustasi[.]com/wp-content/themes/misty-lake/connection[.]php\r\nhxxp://www[.]altingunes[.]com/wp-includes/connection[.]php\r\nhxxp://www[.]altingunes[.]com/wp-includes/customize/connection[.]php\r\nhxxp://www[.]tamamsin[.]com/panel/connection[.]php\r\nhxxp://tamamsin[.]com/libs/connection[.]php\r\nhxxp://tamamsin[.]com/dil/connection[.]php\r\nhxxp://atlasins[.]com[.]tr/wp-includes/connection[.]php\r\nhxxp://atlasins[.]com[.]tr/wp-includes/connection[.]php\r\nhxxp://ilkerreklamcilik[.]com/Joomla_site/cli/connection[.]php\r\nhxxp://ilkerreklamcilik[.]com/Joomla_site/includes/connection[.]php\r\nhxxp://viparkcenter[.]com/wp-includes/connection[.]php\r\nhxxp://viparkcenter[.]com/wp-content/themes/twentyseventeen/connection[.]php\r\nhxxp://www[.]klavyebende[.]com/wp-content/themes/spasalon/connection[.]php\r\nhxxp://www[.]klavyebende[.]com/wp-includes/connection[.]php\r\nhxxp://luleburgazzob[.]org[.]tr/panel/plugins/ckeditor/plugins/about/dialogs/hidpi/connection[.]php\r\nhxxp://luleburgazzob[.]org[.]tr/panel/plugins/ckeditor/plugins/link/dialogs/connection[.]php\r\nhxxp://burakgozutok[.]com/wp-content/themes/twentyfourteen/connection[.]php\r\nhttps://sec0wn.blogspot.com/2018/02/burping-on-muddywater.html\r\nPage 25 of 31\n\nhxxp://burakgozutok[.]com/wp-includes/connection[.]php\r\nhxxp://gebzehavalandirmatr[.]com/admin/connection[.]php\r\nhxxp://gebzehavalandirmatr[.]com/yedek/captcha/connection[.]php\r\nhxxp://deltasolar[.]com[.]tr/admin/connection[.]php\r\nhxxp://deltasolar[.]com[.]tr/catalog/controller/api/connection[.]php\r\nhxxp://ekayapi[.]org/inc/connection[.]php\r\nhxxp://ekayapi[.]org/upload/connection[.]php\r\nhxxp://www[.]otocekicidenizli[.]com/wp-admin/connection[.]php\r\nhxxp://www[.]otocekicidenizli[.]com/wp-content/themes/twentyfourteen/connection[.]php\r\nhxxp://cevahirkardesler[.]com[.]tr/gazete/pages/connection[.]php\r\nhxxp://cevahirkardesler[.]com[.]tr/themes/1/connection[.]php\r\nhxxp://gdijital[.]com/administrator/connection[.]php\r\nhxxp://gdijital[.]com/libraries/connection[.]php\r\nhxxp://rumelipeyzaj[.]com/panel/connection[.]php\r\nhxxp://rumelipeyzaj[.]com/sayfalar/connection[.]php\r\nhxxp://www[.]alpenfitil[.]com/wp-content/themes/twentyfifteen/connection[.]php\r\nhxxp://www[.]alpenfitil[.]com/wp-includes/connection[.]php\r\nhxxp://www[.]alpenfitil[.]com/wp-includes/connection[.]php\r\nhxxp://kindervilla[.]at/team/admin/connection[.]php\r\nhxxp://mslvinc[.]com/wp-content/themes/twentyfifteen/connection[.]php\r\nhxxp://kindervilla[.]at/team/connection[.]php\r\nhxxp://mslvinc[.]com/wp-includes/connection[.]php\r\nhxxp://www[.]ranzamodellerim[.]com/wp-content/plugins/contact-form-7/connection[.]php\r\nhxxp://www[.]ranzamodellerim[.]com/wp-includes/connection[.]php\r\nhxxp://www[.]metoikos-trade[.]com/wp-content/themes/twentyfifteen/connection[.]php\r\nhxxp://www[.]metoikos-trade[.]com/wp-includes/connection[.]php\r\nhttps://sec0wn.blogspot.com/2018/02/burping-on-muddywater.html\r\nPage 26 of 31\n\nhxxp://tecnocoffee[.]com[.]tr/wp-content/themes/enlighten/connection[.]php\r\nhxxp://tecnocoffee[.]com[.]tr/wp-includes/connection[.]php\r\nhxxps://www[.]bedavasat[.]com/export/connection[.]php\r\nhxxps://www[.]bedavasat[.]com/iyzipay/src/Iyzipay/connection[.]php\r\nhxxps://www[.]bedavasat[.]com/fileserver/connection[.]php\r\nhxxp://ustaariyorum[.]com[.]tr/wp-content/themes/wpfirma/connection[.]php\r\nhxxp://ustaariyorum[.]com[.]tr/wp-includes/connection[.]php\r\nhxxp://escapefromsofa[.]com/theme/efs/connection[.]php\r\nhxxp://escapefromsofa[.]com/ajax/connection[.]php\r\nhxxp://www[.]ozturkormancilik[.]com[.]tr/wp-content/themes/twentyfourteen/connection[.]php\r\nhxxp://www[.]ozturkormancilik[.]com[.]tr/wp-includes/connection[.]php\r\nhxxp://trakyacepteknik[.]com/tema/telefon/vendor/assets/connection[.]php\r\nhxxp://trakyacepteknik[.]com/tema/telefon/fonts/font-awesome/css/connection[.]php\r\nhxxp://asortiemobilya[.]com/wp-content/themes/twentyfifteen/connection[.]php\r\nhxxp://asortiemobilya[.]com/wp-includes/Text/connection[.]php\r\nhxxp://ozmetalpen[.]com/wp-content/themes/twentyfourteen/connection[.]php\r\nhxxp://ozmetalpen[.]com/wp-includes/connection[.]php\r\nhxxp://nevzatsolmazinsaat[.]com/wp-content/themes/twentyfifteen/connection[.]php\r\nhxxp://nevzatsolmazinsaat[.]com/wp-includes/connection[.]php\r\nhxxp://standartdogalgaz[.]com/wp-content/themes/themo/connection[.]php\r\nhxxp://standartdogalgaz[.]com/wp-includes/connection[.]php\r\nhxxp://startr[.]com/admin/connection[.]php\r\nhxxp://startr[.]com/system/library/connection[.]php\r\nhxxp://birtavsiyemvar[.]com/assets/css/connection[.]php\r\nhxxp://birtavsiyemvar[.]com/assets/js/connection[.]php\r\nhxxp://www[.]karavanseyahat[.]com/wp-content/themes/twentyfifteen/connection[.]php\r\nhttps://sec0wn.blogspot.com/2018/02/burping-on-muddywater.html\r\nPage 27 of 31\n\nhxxp://www[.]karavanseyahat[.]com/wp-includes/connection[.]php\r\nhxxp://reklambasvurusu[.]com/sistem/connection[.]php\r\nhxxp://reklambasvurusu[.]com/!ercer2001/sistem/connection[.]php\r\nhxxp://www[.]ckumas[.]com/wp-admin/connection[.]php\r\nhxxp://www[.]ckumas[.]com/wp-content/themes/twentyfifteen/connection[.]php\r\nhxxp://www[.]ckumas[.]com/wp-content/themes/twentyfifteen/connection[.]php\r\nhxxp://www[.]ilksahibinden[.]com/kvitrin/connection[.]php\r\nhxxp://www[.]ilksahibinden[.]com/mobil/connection[.]php\r\nhxxp://www[.]emlakbizden[.]com/libs/connection[.]php\r\nhxxp://www[.]emlakbizden[.]com/templates/yedekparca/images/connection[.]php\r\nhxxp://enerjiport[.]org/wp-includes/connection[.]php\r\nhxxp://enerjiport[.]org/wp-content/themes/twentyseventeen/connection[.]php\r\nhxxp://rentacarline[.]com/wp-content/themes/twentyfifteen/connection[.]php\r\nhxxp://rentacarline[.]com/wp-includes/connection[.]php\r\nhxxp://www[.]akillipati[.]com/wp-content/themes/colormag/connection[.]php\r\nhxxp://www[.]akillipati[.]com/wp-includes/connection[.]php\r\nhxxp://www[.]pergolatentefiyatlari[.]com/wp-content/themes/twentyseventeen/connection[.]php\r\nhxxp://www[.]pergolatentefiyatlari[.]com/wp-includes/connection[.]php\r\nhxxp://www[.]oroazteca[.]net/wp-content/themes/twentyfifteen/connection[.]php\r\nhxxp://www[.]oroazteca[.]net/wp-includes/connection[.]php\r\nhxxp://markizorganizasyon[.]com/wp-includes/connection[.]php\r\nhxxp://markizorganizasyon[.]com/wp-content/themes/twentyfifteen/connection[.]php\r\nhxxp://akin[.]me/wp-includes/connection[.]php\r\nhxxp://akin[.]me/wp-content/themes/founder/connection[.]php\r\nhxxp://www[.]bogazturu[.]net/includes/connection[.]php\r\nhxxp://www[.]bogazturu[.]net/plugins/content/finder/connection[.]php\r\nhttps://sec0wn.blogspot.com/2018/02/burping-on-muddywater.html\r\nPage 28 of 31\n\nhxxp://onurlergayrimenkul[.]com/application/language/english/connection[.]php\r\nhxxp://onurlergayrimenkul[.]com/themes/3d-blue-portal/library/connection[.]php\r\nhxxp://stsiletisim[.]com/admin/connection[.]php\r\nhxxp://stsiletisim[.]com/sistem/connection[.]php\r\nhxxp://www[.]a-zgrup[.]com/wp-content/themes/twentyfifteen/connection[.]php\r\nhxxp://www[.]a-zgrup[.]com/wp-includes/connection[.]php\r\nhxxp://matmazel-gelinlik[.]com/wp-includes/connection[.]php\r\nhxxp://matmazel-gelinlik[.]com/wp-content/themes/twentyfifteen/connection[.]php\r\nhxxp://www[.]gokkubbe[.]biz/wp-includes/connection[.]php\r\nhxxp://www[.]gokkubbe[.]biz/wp-content/themes/Extra/connection[.]php\r\nhxxp://eraslan[.]com[.]tr/en/about/connection[.]php\r\nhxxp://eraslan[.]com[.]tr/en/history/assets/nokta/css/connection[.]php\r\nhxxp://www[.]hibedanis[.]com/en/_ajax/connection[.]php\r\nhxxp://www[.]hibedanis[.]com/en/_inc/connection[.]php\r\nhxxp://yildizgokart[.]com/wp-content/plugins/contact-form-7/includes/connection[.]php\r\nhxxp://yildizgokart[.]com/wp-includes/connection[.]php\r\nhxxp://cinarli[.]com/catering/img/connection[.]php\r\nhxxp://cinarli[.]com/restaurant/captcha/connection[.]php\r\nhxxp://sumder[.]org/wp-content/themes/sumder/connection[.]php\r\nhxxp://sumder[.]org/wp-includes/connection[.]php\r\nhxxp://alyanslife[.]com/wp-content/themes/twentyfifteen/connection[.]php\r\nhxxp://alyanslife[.]com/wp-includes/connection[.]php\r\nhxxp://www[.]hibedanis[.]com/admin/connection[.]php\r\nhxxp://www[.]hibedanis[.]com/en/_inc/connection[.]php\r\nhxxp://yildizgokart[.]com/wp-content/languages/plugins/connection[.]php\r\nhxxp://yildizgokart[.]com/wp-includes/connection[.]php\r\nhttps://sec0wn.blogspot.com/2018/02/burping-on-muddywater.html\r\nPage 29 of 31\n\nhxxp://acililan[.]net/libs/connection[.]php\r\nhxxp://www[.]goldenplus[.]com[.]tr/_inc/connection[.]php\r\nhxxp://qrme[.]site/wp-content/themes/twentyseventeen/connection[.]php\r\nhxxp://qrme[.]site/wp-includes/connection[.]php\r\nhxxp://stmgage[.]com/system/engine/connection[.]php\r\nhxxp://stmgage[.]com/system/config/connection[.]php\r\nhxxp://novusglobal[.]us/templates/zoner/connection[.]php\r\nhxxp://novusglobal[.]us/yonet/includes/connection[.]php\r\nhxxp://1111crm[.]com/3Party/ckeditor/plugins/bidi/lang/connection[.]php\r\nhxxp://1111crm[.]com/ESKI/loginbox/system/connection[.]php\r\nhxxp://rehberhds[.]com/wp-content/themes/twentyfifteen/connection[.]php\r\nhxxp://rehberhds[.]com/wp-includes/connection[.]php\r\nhxxp://ctteknik[.]com[.]tr/wp-content/themes/one-page/connection[.]php\r\nhxxp://ctteknik[.]com[.]tr/wp-includes/connection[.]php\r\nhxxp://ngvisco[.]com/wp-includes/connection[.]php\r\nhxxp://ngvisco[.]com/wp-content/themes/betheme/connection[.]php\r\nhxxp://kursunkalemhoca[.]com/wp-content/themes/twentyseventeen/connection[.]php\r\nhxxp://kursunkalemhoca[.]com/wp-includes/connection[.]php\r\nhxxps://www[.]asortie[.]com/blog/wp-content/themes/colormag/connection[.]php\r\nhxxps://www[.]asortie[.]com/blog/wp-includes/connection[.]php\r\nhxxp://www[.]tulayalpayegitim[.]com/wp-content/themes/einsteiniumist/connection[.]php\r\nhxxp://www[.]tulayalpayegitim[.]com/wp-includes/customize/connection[.]php\r\nhxxps://bayanhobisi[.]com/wp-content/themes/twentyfifteen/connection[.]php\r\nhxxps://bayanhobisi[.]com/wp-includes/connection[.]php\r\nhxxp://3eyonetim[.]com/wp-includes/connection[.]php\r\nhxxp://3eyonetim[.]com/wp-content/themes/twentyfifteen/connection[.]php\r\nhttps://sec0wn.blogspot.com/2018/02/burping-on-muddywater.html\r\nPage 30 of 31\n\nhxxp://derinbutikotel[.]com/templates/beez3/language/en-GB/connection[.]php\r\nhxxp://derinbutikotel[.]com/includes/connection[.]php\r\nSource: https://sec0wn.blogspot.com/2018/02/burping-on-muddywater.html\r\nhttps://sec0wn.blogspot.com/2018/02/burping-on-muddywater.html\r\nPage 31 of 31",
	"extraction_quality": 1,
	"language": "TR",
	"sources": [
		"Malpedia"
	],
	"references": [
		"https://sec0wn.blogspot.com/2018/02/burping-on-muddywater.html"
	],
	"report_names": [
		"burping-on-muddywater.html"
	],
	"threat_actors": [
		{
			"id": "02e1c2df-8abd-49b1-91d1-61bc733cf96b",
			"created_at": "2022-10-25T15:50:23.308924Z",
			"updated_at": "2026-04-10T02:00:05.298591Z",
			"deleted_at": null,
			"main_name": "MuddyWater",
			"aliases": [
				"MuddyWater",
				"Earth Vetala",
				"Static Kitten",
				"Seedworm",
				"TEMP.Zagros",
				"Mango Sandstorm",
				"TA450"
			],
			"source_name": "MITRE:MuddyWater",
			"tools": [
				"STARWHALE",
				"POWERSTATS",
				"Out1",
				"PowerSploit",
				"Small Sieve",
				"Mori",
				"Mimikatz",
				"LaZagne",
				"PowGoop",
				"CrackMapExec",
				"ConnectWise",
				"SHARPSTATS",
				"RemoteUtilities",
				"Koadic"
			],
			"source_id": "MITRE",
			"reports": null
		},
		{
			"id": "3f42c8f4-2cf1-4555-abff-b19852033aec",
			"created_at": "2023-11-08T02:00:07.099084Z",
			"updated_at": "2026-04-10T02:00:03.41336Z",
			"deleted_at": null,
			"main_name": "TA499",
			"aliases": [
				"Vovan",
				"Lexus"
			],
			"source_name": "MISPGALAXY:TA499",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		},
		{
			"id": "2ed8d590-defa-4873-b2de-b75c9b30931e",
			"created_at": "2023-01-06T13:46:38.730137Z",
			"updated_at": "2026-04-10T02:00:03.08136Z",
			"deleted_at": null,
			"main_name": "MuddyWater",
			"aliases": [
				"TEMP.Zagros",
				"Seedworm",
				"COBALT ULSTER",
				"G0069",
				"ATK51",
				"Mango Sandstorm",
				"TA450",
				"Static Kitten",
				"Boggy Serpens",
				"Earth Vetala"
			],
			"source_name": "MISPGALAXY:MuddyWater",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		},
		{
			"id": "1a9c4f3f-2178-4c83-a9b5-d2135d90520a",
			"created_at": "2024-04-19T02:00:03.623733Z",
			"updated_at": "2026-04-10T02:00:03.615238Z",
			"deleted_at": null,
			"main_name": "BlackJack",
			"aliases": [],
			"source_name": "MISPGALAXY:BlackJack",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		},
		{
			"id": "75108fc1-7f6a-450e-b024-10284f3f62bb",
			"created_at": "2024-11-01T02:00:52.756877Z",
			"updated_at": "2026-04-10T02:00:05.273746Z",
			"deleted_at": null,
			"main_name": "Play",
			"aliases": null,
			"source_name": "MITRE:Play",
			"tools": [
				"Nltest",
				"AdFind",
				"PsExec",
				"Wevtutil",
				"Cobalt Strike",
				"Playcrypt",
				"Mimikatz"
			],
			"source_id": "MITRE",
			"reports": null
		},
		{
			"id": "156b3bc5-14b7-48e1-b19d-23aa17492621",
			"created_at": "2025-08-07T02:03:24.793494Z",
			"updated_at": "2026-04-10T02:00:03.634641Z",
			"deleted_at": null,
			"main_name": "COBALT ULSTER",
			"aliases": [
				"Boggy Serpens ",
				"ENT-11 ",
				"Earth Vetala ",
				"ITG17 ",
				"MERCURY ",
				"Mango Sandstorm ",
				"MuddyWater ",
				"STAC 1171 ",
				"Seedworm ",
				"Static Kitten ",
				"TA450 ",
				"TEMP.Zagros ",
				"UNC3313 ",
				"Yellow Nix "
			],
			"source_name": "Secureworks:COBALT ULSTER",
			"tools": [
				"CrackMapExec",
				"Empire",
				"FORELORD",
				"Koadic",
				"LaZagne",
				"Metasploit",
				"Mimikatz",
				"Plink",
				"PowerStats"
			],
			"source_id": "Secureworks",
			"reports": null
		},
		{
			"id": "3c430d71-ab2b-4588-820a-42dd6cfc39fb",
			"created_at": "2022-10-25T16:07:23.880522Z",
			"updated_at": "2026-04-10T02:00:04.775749Z",
			"deleted_at": null,
			"main_name": "MuddyWater",
			"aliases": [
				"ATK 51",
				"Boggy Serpens",
				"Cobalt Ulster",
				"G0069",
				"ITG17",
				"Mango Sandstorm",
				"MuddyWater",
				"Operation BlackWater",
				"Operation Earth Vetala",
				"Operation Quicksand",
				"Seedworm",
				"Static Kitten",
				"T-APT-14",
				"TA450",
				"TEMP.Zagros",
				"Yellow Nix"
			],
			"source_name": "ETDA:MuddyWater",
			"tools": [
				"Agentemis",
				"BugSleep",
				"CLOUDSTATS",
				"ChromeCookiesView",
				"Cobalt Strike",
				"CobaltStrike",
				"CrackMapExec",
				"DCHSpy",
				"DELPHSTATS",
				"EmPyre",
				"EmpireProject",
				"FruityC2",
				"Koadic",
				"LOLBAS",
				"LOLBins",
				"LaZagne",
				"Living off the Land",
				"MZCookiesView",
				"Meterpreter",
				"Mimikatz",
				"MuddyC2Go",
				"MuddyRot",
				"Mudwater",
				"POWERSTATS",
				"PRB-Backdoor",
				"PhonyC2",
				"PowGoop",
				"PowerShell Empire",
				"PowerSploit",
				"Powermud",
				"QUADAGENT",
				"SHARPSTATS",
				"SSF",
				"Secure Socket Funneling",
				"Shootback",
				"Smbmap",
				"Valyria",
				"chrome-passwords",
				"cobeacon",
				"prb_backdoor"
			],
			"source_id": "ETDA",
			"reports": null
		}
	],
	"ts_created_at": 1775434780,
	"ts_updated_at": 1775792062,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/ddb0dcbd13485f05e8b8327cf0a47c62ecc0e35a.pdf",
		"text": "https://archive.orkl.eu/ddb0dcbd13485f05e8b8327cf0a47c62ecc0e35a.txt",
		"img": "https://archive.orkl.eu/ddb0dcbd13485f05e8b8327cf0a47c62ecc0e35a.jpg"
	}
}