hxxps://accounts[.]google[.]com/ServiceLogin?service=wise&passive=1209600&osid=1&continue=hxxps://drive[.]google[.]com/file/d/1c0FT0lY0Ob0V0IzROqiD3IeLEkoLvXa0/view&followup=hxxps://drive[.]google[.]com/file/d/1c0FT0lY0Ob0V0IzROqiD3IeLEkoLvXa0/view&ec=GAZAGQ

hxxps://www[.]applebitcoins[.]com/

hxxps://gofile[.]in/paste/exploit_status[.]html

hxxps://chromewebstore[.]google[.]com/detail/violentmonkey/jinjaccalgkegednnccohejagnlnfdag?hl=en

hxxps://gofile[.]in/paste/applebitcoins[.]txt