# Copyright (c) 2014-2026 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Note: continuation of /trails/malware/apt_unc6691.txt

# Reference: https://cloud.google.com/blog/topics/threat-intelligence/coruna-powerful-ios-exploit-kit
# Reference: https://iverify.io/blog/coruna-inside-the-nation-state-grade-ios-exploit-kit-we-ve-been-tracking

00149989.com
003.6ad59f5345.workers.dev
0291.top
0505.wwxblue.workers.dev
0rdershop.com
1-nycyh.workers.dev
1.a13518075286.workers.dev
11.jponliine.com
125540947.workers.dev
14.harajukup.com
15999756862.workers.dev
1a.zencartjp.com
1b21533f51.workers.dev
1f.okinasumo.com
1f6z8.com
1k.kyusmalli.com
1k.zenjpmart.com
1k4m8.com
1m9z3.com
1mgtpu86.niponshop.com
1n3p9.com
1n5f8.com
1natsuhina.workers.dev
1p2k9.com
1p4k9.com
1q.zenshopjp.com
1r8v2.com
1t7n3.com
1x9p2.com
2023.youorder.shop
20240410.tdbvqepmg.workers.dev
2204.miltonq6xtbse.workers.dev
251422406.workers.dev
2c8b3f19-0325-4acc-a3dd-31a918e4dbf5.random.yourorders.shop
2d8n1.com
2f7r4.com
2g8c4.com
2g9p7.com
2k5v3.com
2k9x5.com
2n3v6.com
2n8b6.com
2p7r9.com
2w6p1.com
2x1p9.com
2z4r9.com
3268194287.workers.dev
3315212323.workers.dev
3c8f1.com
3d2p5.com
3g7p1.com
3k-xiangtong.starlightchannel666.workers.dev
3ked.460530788.workers.dev
3m1x8.com
3memk1pz.niponshop.com
3n7r6.com
3p4x9.com
3p5g8.com
3q.fujifindjp.com
3r6w2.com
3t2k8.com
3t4b8.com
3u2t71.niponshop.com
3v9r6.com
3z2f7.com
3z5p6.com
41.animebuyjp.com
44.kireiishop.com
447454161.workers.dev
460530788.workers.dev
4b8x2.com
4f8c1.com
4f9m7.com
4g5k2.com
4g9m6.com
4hejvbg.niponshop.com
4jvrhyaf.workers.dev
4k1d8.com
4kt185.niponshop.com
4n1v3.com
4nmj3.ytrewvsdf.workers.dev
4q7v3.com
4r7k3.com
4t5x3.com
4t9w2.com
4v3n2.com
4v7d3.com
51kav.cc
5a6s3ix.niponshop.com
5d6g4.com
5f1x7.com
5g1x4.com
5k6r8.com
5k7m1.com
5m6b1.com
5p1d6.com
5p6f2.com
5r3g7.com
5x9m1.com
5ychc.niponshop.com
5z4m9.com
5z8k2.com
61949xyegg.xn--5tzm5g
63.zakkagadget.com
666.4jvrhyaf.workers.dev
6ad59f5345.workers.dev
6d4n9.com
6d7n1.com
6f1k8.com
6g8r1.com
6k9t4.com
6n3w9.com
6r7d5.com
6r9d3.com
6sel8ix.niponshop.com
6x9rd.com
6z2m4.com
6z5b8.com
7435840wuyingc.workers.dev
77777.dengguizhen.workers.dev
78198435.click
7c3t5.com
7m1z9.com
7p3z2.com
7p8c1.com
7r.kyotocartjp.com
7r8k3.com
7t5m6.com
7v4z2.com
7w6z3.com
7x8g3.com
7z2p5.com
81.zdpqq1991.workers.dev
83813548.click
83813548.lol
878968.xyz
89mnjyvxp6.workers.dev
8c1f4.com
8d5t1.com
8d5x1.com
8f2g5.com
8f5v2.com
8g4d3.com
8k2z9.com
8k4m9.com
8k5v2.com
8m2v6.com
8m4v9.com
8v2k6.com
8v3d1.com
91843541.xyz
93zr3aq.niponshop.com
9898bkf.com
9b7g1.com
9g1f4.com
9k6p5.com
9p4z2.com
9r6p1.com
9t5c2.com
9v1d6.com
9v8d3.com
9w1f8.com
9w2z4.com
9x5n2.com
9x6c8.com
9x8c1.com
9ye-8ejm.workers.dev
9youyule.online
9z1b3.com
a13518075286.workers.dev
a736134280.workers.dev
a9bet3.com
a9bet6.com
a9bet8.com
a9bet9.com
ak47-3.vvovv100.workers.dev
akihahome.com
alancf.wensionhong.workers.dev
aleluza.com
amazon.denkitech.com
amazon.denkwashi.com
amazon.nihonrlce.com
amazon.rakkumall.com
amazon.sbicojp.com
amazon.yourorders.shop
amazon.zakkadenki.com
amazon.zakkagadget.com
andy-zhang1980-az.workers.dev
animebuyjp.com
anjayalok0967.workers.dev
anquanxianlu.com
aofei.basr3ng7bks.workers.dev
app.ftc.ae.org
app.thantgt.cn
app.youorder.shop
arthurqiu001.workers.dev
ashleymidison.com
assets.51kav.cc
atlantic.cilac4.workers.dev
banlanmao.com
basr3ng7bks.workers.dev
benchi77.haoyun.bar
bk7d8.niponshop.com
blog.youorder.shop
byibitex.com
c5q2z.com
cf-worker-ws-dev.anjayalok0967.workers.dev
cf2024b.pages.dev
chaoyangyiyuan202603.com
chmuon.com
chmuonjp.com
chongfeng2026.com
chongfeng202601.com
chongfeng202602.com
cilac4.workers.dev
cpanel.phecoin.net
cs2.k7176632.workers.dev
damp-hat-8cf0.mohammadaminghodrati19.workers.dev
deakeshop.com
deakijy.com
deakijyp.com
demo.youorder.shop
dengguizhen.workers.dev
denkihome.com
denkitech.com
denkwashi.com
detonow.live
dffgg.nhyvvfeijnh.workers.dev
disabled494.workers.dev
dm.johnhpure.vip
ds-7yg.pages.dev
duolefu2026.com
duolefu202601.com
e3.xunaimedia.shop
ehlony.com
ekbelk.com
eweiah.workers.dev
exvyi.com
ezvless.workers.dev
f4r8d.com
false1997.us
fatima-fatima69.workers.dev
fatima69.fatima-fatima69.workers.dev
fbi.haoyun.bar
foru.0291.top
fqh3as1x.niponshop.com
free.nomo.eu.org
frimke.niponshop.com
fujifindjp.com
fulkeiy.com
fulkks.com
fuqijia.workers.dev
futlle.com
g1290585977.workers.dev
g4cbg5nn.niponshop.com
galetam249.workers.dev
gechen9047.workers.dev
ggg.xu-zhice719.workers.dev
ghasem0073.workers.dev
ghdggdh6.com
github73742.workers.dev
goldmirage777.com
gxvyi.com
h.deakeshop.com
hamedmj3.workers.dev
hamedmoghaddas-1.hamedmj3.workers.dev
hannavip.workers.dev
haoyun.bar
hapshp.com
harajukup.com
hawiuybcop.workers.dev
hazrat1.nssizd.workers.dev
hbvyi.com
hein.github73742.workers.dev
hello-world-muddy-firefly-f377.uiwqrth.workers.dev
hello-world-raspy-dust-5ec6.251422406.workers.dev
hero5star.89mnjyvxp6.workers.dev
hfia0h.niponshop.com
hnvyi.com
hoiishi.net
hoiyome.net
honghui2024.447454161.workers.dev
hosorif.hosorif104.workers.dev
hosorif104.workers.dev
hostmaster.51kav.cc
huangdou.online
hw985211.workers.dev
ideishop.com
idn-ztn.hannavip.workers.dev
imo111-org.pages.dev
info.matfull.com
ishihoty.net
j8n3w.com
jhabara.com
jiabi.org
jiaolong2026.com
jiaolong202602.com
jiaolong202603.com
jinxin2026.com
jinxin202603.com
jixiang202602.com
jixiang202603.com
johnhpure.vip
jp0rder.com
jpdeakei.com
jpdealsjp.com
jpfashlon.com
jpkaimon.com
jpmallco.com
jponliine.com
jpshopjp.com
juzhen2026.com
juzhen202601.com
k7176632.workers.dev
kaimojp.com
kaimshop.com
kawailcart.com
kekkoni.net
kekyome.com
kerehore.pages.dev
kexuesw.a736134280.workers.dev
king-richard20231031.workers.dev
kireiishop.com
kk018.kkpstudio.net
kkpstudio.net
koicon.net
koideai.net
koideia.com
koihit.com
koiishi.net
koioitn.com
koioitn.net
kokuishop.com
kokuybi.com
konditxxy.workers.dev
kongtouse.com
kyotocartjp.com
kyotocrafi.com
kyotoihome.com
kyusmalli.com
l3nh505.niponshop.com
lancheng.tc17852841326.workers.dev
laxuv.niponshop.com
lindaxueshi520.workers.dev
litianyu.15999756862.workers.dev
little-base-e715.willgq612.workers.dev
liusjad.workers.dev
love2.ghdggdh6.com
lr-11.3268194287.workers.dev
lsadown.com
luochongzhan2.workers.dev
m.shop121.vip
m.youorder.shop
m3v6z.com
m4t8b.com
mary6.ghasem0073.workers.dev
matchko.net
matfull.com
media-amazon.sbicojp.com
mercari.denkihome.com
mercari.denkitech.com
mercari.jpfashlon.com
mercari.jpmallco.com
mercari.jponliine.com
mercari.kyotocrafi.com
mercari.kyusmalli.com
mercari.nihonrlce.com
mercari.ramenihome.com
mercari.zakkagadget.com
mianfei-cf.hw985211.workers.dev
microeco2026.com
miltonq6xtbse.workers.dev
mingzhi396.workers.dev
miskoy.com
mohammadaminghodrati19.workers.dev
msisubi.com
msiyub.com
mskrky.com
mskrshop.com
mx.matfull.com
n6xd0y.niponshop.com
naei2956.workers.dev
neo.james-345.workers.dev
newv2ray20240504.luochongzhan2.workers.dev
newvpn.1b21533f51.workers.dev
nhyvvfeijnh.workers.dev
nihonrlce.com
niponshop.com
nmils.cfd
no1.liusjad.workers.dev
nssizd.workers.dev
nuerozhfgricloudnsbiz1111.vomaxurorng.workers.dev
odyssey.zmj1368.workers.dev
okinasumo.com
okinyaku.com
old-hall-f717.santoegy25.workers.dev
oooof.zhangxning.workers.dev
orderjjp.com
ordershoop.com
oumcurrency.it.com
oynf04.oyxin520.workers.dev
oyxin520.workers.dev
p6c8t.com
pader-ff7.workers.dev
pairs.deakeshop.com
pairs.denkihome.com
pairs.denkitech.com
pairs.fujifindjp.com
pairs.hapshp.com
pairs.harajukup.com
pairs.jhabara.com
pairs.jpdealsjp.com
pairs.kyusmalli.com
pairs.mskrshop.com
pairs.nihonrlce.com
pairs.okinasumo.com
pairs.okinyaku.com
pairs.rakkumall.com
pairs.ramenihome.com
pairs.sumodjp.com
pairs.waotaku.com
pairs.zakkagadget.com
pairs.zenjpmart.com
pairs.zenshopjp.com
paris.denkitech.com
paris.kyotocrafi.com
paris.kyusmalli.com
paris.zakkadenki.com
paris.zakkagadget.com
peiguanglin168.workers.dev
pg1313bet.com
pgl.peiguanglin168.workers.dev
phemem.com
phemems.com
phemems.net
phemems.vip
powdf.cfd
proxy.pader-ff7.workers.dev
proxyworld.wuchao84.workers.dev
pz1sjl.niponshop.com
pzz-2024-1.tanyuzhou8888.workers.dev
q.jpdealsjp.com
q1.xunaimedia.shop
q2.arthurqiu001.workers.dev
q8.qqt.pp.ua
q9x4c.com
qqvpn.my
rakkumall.com
ramenihome.com
random.yourorders
random.yourorders.shop
rbhyt6d4.niponshop.com
rc.unucqzzeqwgss2rv1.site
redeliver-fedex.com
redeliveryfedex.com
restless-hall-dd45-vless.worried-stroller417.workers.dev
rqgea.com
rzki.workers.dev
s1-sg.ezvless.workers.dev
s9.futlle.com
sakuramatch.online
samurmall.com
santoegy25.workers.dev
sbicojp.com
shirasawali.workers.dev
shiwo.haoyun.bar
sitemaps.youorder.shop
sn6sqvddi99lnd-zkte.cc
sptvc01.eweiah.workers.dev
ssl-images-amazon.sbicojp.com
starlightchannel666.workers.dev
sumodjp.com
szvyi.com
t5b8qnt.niponshop.com
taiyang202603.com
tanyuzhou8888.workers.dev
tc17852841326.workers.dev
tdbvqepmg.workers.dev
telegranam.com
telesur.softether.net
tes.disabled494.workers.dev
test.lindaxueshi520.workers.dev
test.sakuramatch.online
test5uij.naei2956.workers.dev
tokio.love
trc.ghdggdh6.com
tv9lby2.niponshop.com
twgkfl.sbs
twihdgfk.sbs
txj5a3q.niponshop.com
ty.jhabara.com
tyro01.workers.dev
u810cp.aleluza.com
u85.com-ioshtn.com
u85.ehlony.com
u85.ekbelk.com
u85.gduts.com
u85cp.cwjckk.com
uiwqrth.workers.dev
usdt.xn--5tzm5g
usdtairdrop.vip
uw.kaimojp.com
uz.phecoin.net
v6.matfull.com
ve.rzki.workers.dev
vj.sumodjp.com
vomaxurorng.workers.dev
vpnhero.zylabymjyd.workers.dev
vvovv100.workers.dev
vyi.ai
vyi365.com
vyiai.com
w2.xunaimedia.shop
w8p3k.com
waotaku.com
weathered-sound-232e.fuqijia.workers.dev
webmail.zakkahome.com
wei0.weihongtai2121.workers.dev
weihongtai2121.workers.dev
weishiguang202602.com
wensionhong.workers.dev
willgq612.workers.dev
wkvpn.shirasawali.workers.dev
wnc.mingzhi396.workers.dev
wo-03.gechen9047.workers.dev
wo2024.1b21533f51.workers.dev
wordpress.youorder.shop
worker-autumn-wood-4eb9.konditxxy.workers.dev
worker-flat-snowflake-2087.galetam249.workers.dev
worker-fragrant-math-0e86.tyro01.workers.dev
worker-lingering-hat-cef9.1-nycyh.workers.dev
worker-patient-tooth-7793.1natsuhina.workers.dev
worker-vless.hawiuybcop.workers.dev
workers-vless.yongweili412.workers.dev
worried-stroller417.workers.dev
wu19219029306.workers.dev
wu54.wu19219029306.workers.dev
wuchao84.workers.dev
wwdz.9ye-8ejm.workers.dev
wwuu.7435840wuyingc.workers.dev
wwxblue.workers.dev
x.rakkumall.com
x3k7p.com
x7b5p.com
xbg.3315212323.workers.dev
xiangrikui202601.com
xiangrikui202602.com
xinghuo2026.com
xinghuo202603.com
xr.jpmallco.com
xray.false1997.us.kg
xtbm04.niponshop.com
xu-zhice719.workers.dev
xu.ideishop.com
xunaimedia.shop
xy4ik8f.niponshop.com
xye61949-gg15.61949xyegg.xn--5tzm5g
xye61949-gg15.usdt.xn--5tzm5g
xye61949-gg18.usdt.xn--5tzm5g
xye61949-gg20.usdt.xn--5tzm5g
xye61949-gg29.61949xyegg.xn--5tzm5g
xye61949-gg30.usdt.xn--5tzm5g
xye61949-gg4.61949xyegg.xn--5tzm5g
xye61949-gg8.61949xyegg.xn--5tzm5g
y.jpfashlon.com
y9.chmuonjp.com
yakuzone.com
yanyi.g1290585977.workers.dev
ydsth.top
yezi.haoyun.bar
yg.okinyaku.com
yigui202603.com
yigui202604.com
yigui202605.com
yongweili412.workers.dev
youhuijlinswq.cc
youorder.shop
yourorders.shop
yr.yakuzone.com
ytkjs.niponshop.com
ytrewvsdf.workers.dev
yubdeai.com
zakkadenki.com
zakkagadget.com
zakkahome.com
zdneua.niponshop.com
zdpqq1991.workers.dev
zencartjp.com
zenjpmart.com
zenshopjp.com
zhangandy.andy-zhang1980-az.workers.dev
zhangxning.workers.dev
zhanhong2026.com
zhanhong202601.com
zhanhong202603.com
zhejiang.king-richard20231031.workers.dev
zmj1368.workers.dev
zo.0rdershop.com
zuixin.125540947.workers.dev
zylabymjyd.workers.dev
zz.turbron.com
zzzz-440.pages.dev
