dimanche 10 décembre 2017

An inside view of a password stealer campaign

Hi,
After a lightning talks at botconf 2017 I'll try to describe here the full story behind the fav.al malware campaign.
This is not something new, after looking at this internet I've found an article about this case in 2016 but I cannot find any article about the big picture of this case. So, here we go


This is a verrrrry classic case in cyber crime. During the last 5 years I've seen a lot of cases like this one.

Starting line

By looking on public sandboxes I have found a recurrent domain hosting Agent Tesla panel:
[+] 1eb54cd95709b62ebafa50b5dc051a41225b1de236bf8d269ceeac1087f9fbb1 POST -> t4st.fav.al/st/post.php
[+] 78ca1db4616ac10d6ae34a9f8b85b63966fad43fed0f40cf61d9fcde74892d94 POST -> t2st.fav.al/st/post.php
fav.al is known since almost May 2016 for hosting Pony Formbook or Agent Tesla on many different sub domains.
Before giving details on the infrastructure, a quick reminder about the malware used:
Family Method Gate UserAgent
Pony POST gate.php
Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/5.0)
Agent Tesla POST post.php
Mozilla/5.0 (Windows; U; Windows NT 6.1; ru; rv:1.9.2.3) Gecko/20100401 Firefox/4.0 (.NET CLR 3.5.30729)
Form Book GET / POST config.php?id= / config.php
Mozilla Firefox/4.0
Those malware are designed to crawls the victim computer and search for saved credentials like FTP, RDP, Email, web sites... in Browser, registry, config files ...
Some good analyzes:
Pony:


Agent Tesla:


FormBook:

Almost 2 of these malware are open sources. Pony and Agent Tesla has leaked sometimes ago. I draw your attention on these very lame malware. Here, they used the default configuration for Pony and Agent Tesla. The gate is by default, the web requests are by default etc. Take a look at how, in 2017, crooks used old lame Pony shits to infects people protected by "next gen anti virus".
I've work in AV industry, I know how it's difficult to implement protections on Windows without false positive (thanks to all the fucking third party software developed by n00b) but COME ONE! PONY!

Put a global hook (even in userland LOL) and blocks every POST request on gate.php and white list browsers ! Trust me you will catch 80% of the cyber crime... You can even propose a premium version which blocks POST on fre.php and you can be the best AV on Gartner...


kns1.al, fav.al and ddf.al as panel C&C since 2015

These crooks use only a few domains during the operation, and split different victims on different sub domains.
Each sub domains are configured with 2 panels, Formbook and {Pony|Agent Tesla}. In the past this gang used Zeus too
dff.al was known since almost 2015-08-24 (bd1e28f55b2b335e27762425ebc70ffe17d468d7896bf2869bc0e5fa3e4220e2 - (hxxp://files1.ddf.al/bin1.exe)
This looks like a kind of password stealer as service infrastructure.

                      +-----------------------------+-----------------------------+
                      |                             |                             |    
                   fav.al                         ddf.al                        kns1.al
                      |                             |                             |                                                       
                      |                             |                             |        
                 401.fav.al                     d1.ddf.al                      bin1.kns1.al      
                 402.fav.al                     dbr.ddf.al                     bon1.kns1.al
                 403.fav.al                     f1.ddf.al                      byn1.kns1.al
                 404.fav.al                     files.ddf.al                   dan1.kns1.al
                 ali1st.fav.al                  files1.ddf.al                  dan1-d.kns1.al
                 cent1.fav.al                   frank1.ddf.al                  dave1.kns1.al
                 char2.fav.al                   111.dff.al                     denko1.kns1.al
                 charles1.fav.al                owe1.ddf.al                    dinu1.kns1.al
                 charles1-s.fav.al              owe2.ddf.al                    gt1.kns1.al
                 daniel1.fav.al                 owe3.ddf.al                    jeff1.kns1.al
                 dave1.fav.al                   legend1.ddf.al                 jones1.kns1.al
                 db.fav.al                      s1.ddf.al                      ld1.kns1.al
                 dfg2.fav.al                                                   ld1files.kns1.al
                 dfg3.fav.al                                                   nasty1.kns1.al
                 dfg2-s.fav.al                                                 sailheats2.kns1.al
                 dino1.fav.al                                                  sheats1.kns1.al
                 ebu1.fav.al                                                   swain1.kns1.al
                 gabriel1-st.fav.al                                            swain2.kns1.al
                 g1.fav.al                                                     tunapy1.kns1.al
                 g2.fav.al                                                     wal1.kns1.al
                 g3.fav.al                                                     wal2.kns1.al
                 gr2-s.fav.al                                                  wal3.kns1.al
                 heat1.fav.al                                                  wal4.kns1.al
                 idino2.fav.al                                                 wal5.kns1.al
                 ll1.fav.al
                 nwam1.fav.al
                 oct1.fav.al
                 oct3-st.fav.al
                 oct4-st.fav.al
                 pat1st.fav.al
                 patrick1.fav.al
                 riv1.fav.al
                 sail1st.fav.al
                 sail2st.fav.al
                 senator1st.fav.al
                 skadams1.fav.al
                 swaindino1.fav.al
                 t2st.fav.al
                 t3st.fav.al
                 t4st.fav.al
                 upd1.fav.al
                 upd3.fav.al
                 wal1.fav.al
Some panels example from CCT:





This team don't use mass spreading, they select specific victims (we will understand how later), I have seen ~110 victims dispatched in many sub domains. They use password stealer for grabbing access on company and try to steal money.
Password stealer are only one part of their business. During data analysis I have seen that they also used Phishing, scam and CVV laundering.

An inside view

There is a repetitive behavior with lame botmaster. In many case they infect themselves with the malware.
I suspect 2 behaviours behind that:
  • The botmaster wants know if everything is okay with the botnet and the self-infection is used as monitoring
  • The botmaster is a n00b

I think for this case, it's both :).
On one panel, a victim appears to be one admin behind those Formbook & Agent Tesla panels.



This guy stayed infected from 09/13/2017 to 09/22/2017, I'll try to use the collected data to understand how he works and how are used the stolen data. Notice that doxing is not the point here.

Autopwn

Victims

As the screenshots shows, victims seems not really targeted, they look for small business easy to hack:


They used already pwned email inboxes for spreading password stealer through fake DocuSign notice:

With filename like "RBL-5019.Jpg,2800 PSI,1450 RPM.Jpg.exe" (81962cbfd51b64b51eeb4110ef139fd3c2791965621bf7ee65a422974a6ec4a1) or "Desktop.zip" (dfdc0b9e2cffead30a77bfffad6fb621f6eccaf6f5ace4b1d46bfe7b141a6028).

After stealing passwords, this admin spy on victims activities and discuss with other people on how he can hijack money:




The majority of victims came from China and USA:


In this panel we can see 17 victims, after grabbing all the panels I have counted 101 victims

Admin opsec

After a quick look we can easily understand that this guy looks like another Nigerian phishers. They often don't have any opsec, they have facebook account with cash photo etc because they know that there is no law or resources for arresting them.

This is the desktop of this guy:


He uses hacked RDPs and socks proxies for hiding his IP:



Another interesting fact, apparently this guy doesn't really know how malware works. In the conversation below you can see a "MASTER" botmaster angry because somebody uploads malware sample on VirusTotal, and our guy apologies:




I have also seen that they used ICQ, Jabber and Skype to communicate. On the same day and with the same person, they switch between 3 softwares and they quite never used OTR.

Samples

The autopwned guy seems to have the ability to crypt malware. Quite every sample I've found has the same lame VB5 packer


Some samples:
  • 15775abe5573192d8abe6fc03240ef8d0afc94bbae22df5f940a789146295ebb - Agent Tesla - t1st.fav.al/st/post.php
  • 81962cbfd51b64b51eeb4110ef139fd3c2791965621bf7ee65a422974a6ec4a1 - Agent Tesla - t4st.fav.al/st/post.php
  • f1b15760d728dc24cd87339be20cc4fe14359bf810f6866b3e21d7ade25846ed - Pony - riv1.fav.al/ddob/gate.php
(I cannot find any formbook sample :/)

Conclusion

This kind of autopwn allows us to better understand how criminals works, how they can make a lot of money with low investments.

This is far from APTs but the consequences are serious too. We seriously saw a lot of cases like this one, every week on public sandboxes or support forums. This is a big impunity industry of money stealing. I'm pretty sure that this guy is not a developer or system administrator. He doesn't know how a keylogger works, he is just one guy part of a big community of panels operators.
I understand that it's difficult to stop these criminals because of different countries law but we can maybe still make an effort on lame malware detection, no?

98 commentaires:

  1. Nice post benkow. Just a thought regarding "blocks every POST request on gate.php and white list browsers !":
    1) Don't underestimate the number of different (and weird) clean software in the world. Even a single false positive is too high for AVs: the gap between 1st and last place on AV comparatives ranking is often as small as a few false postives on 100k urls.
    2) if you block these urls using aggresive regex, it will take them 5 minutes to change the default installation name and make it random (and thus harder for AVs to detect internally)

    RépondreSupprimer
  2. :) I understand the point 1 but not the point 2. It take 5 min to change the default install for a good reverser or cracker but 99% of cybercrime operator are lame and don't know how to do that. They don't even know how malware works. Everybody use the default installation for Pony since 2014

    RépondreSupprimer
  3. Water Hack Burns 2lb of Fat OVERNIGHT

    Over 160 000 men and women are trying a simple and SECRET "liquid hack" to burn 1-2lbs each night while they sleep.

    It is simple and it works with anybody.

    This is how you can do it yourself:

    1) Grab a drinking glass and fill it half the way

    2) Proceed to use this awesome hack

    you'll become 1-2lbs skinnier the very next day!

    RépondreSupprimer
  4. Hi, I just found your blog and I've read many good topics but I have a question. can i pay someone to write my essay?

    RépondreSupprimer
  5. It is important for medical science research paper service students to seek Medical Science Assignment Help from a reputable custom medical science writing company so as to be assured of good grades in their medical science essay writing services.

    RépondreSupprimer
  6. Finding the best Help with Medical Assignment is not easy unless one is keen to establish a professional medical assignment help & medical homework help online.

    RépondreSupprimer
  7. Online religion research paper writing services are very difficult to complete and many students are always searching for Religion Research Paper Services companies to help them complete their custom religion essay writing services.

    RépondreSupprimer
  8. Thanks for sharing as it is an excellent post all123movies.rocks

    RépondreSupprimer
  9. 123movies. Complete Reliable E-Commerce Development Package Choose best Ecommerce software development company & build your own online store we...


    RépondreSupprimer
  10. Business coursework writing services are essential for business assignment writing services and Business Essay Writing Services seekers.

    RépondreSupprimer
    Réponses
    1. This is far from APTs but the consequences are serious too. We seriously saw a lot of cases like this one, every week on public sandboxes or support forums. This is a big impunity industry of money stealing. I'm pretty sure that this guy is not a developer or system administrator. He doesn't know how a keylogger works, he is just one guy part of a big community of panels operators. new bed sheet , double bed comforter , gul ahmed comforter price , fancy bed sheets designs , duvet sets

      Supprimer
  11. If you want to watch free TV shows and movies using streaming websites then there is no alternative as compared to putlocker. Also, we made a list of alternatives like Putlocker sites that you can use to stream movies and TV shows.

    Here is the official Putlocker website with a lot of trending and popular movies to watch.

    Hosting companies and law enforcement are always taking down free streaming sites, including long-time favorite Putlockers. So what are you supposed to do when your usual top pick for free streaming isn’t working anymore?

    Don’t put away that popcorn just yet! I tested 47 leading streaming sites for safety, usability, and speed. After careful review and ranking based on streaming catalog size, content, and quality, I’ve found offical proxy site of Putlockers.

    RépondreSupprimer
  12. Online law research paper help services are very common nowadays since there are very many students seeking Law Research Writing Services and law essay writing services.

    RépondreSupprimer
  13. This is extremely helpful info!! Very good work.Do My Essay Uk Thanks for all of your time & work.

    RépondreSupprimer
  14. In October 2018, the MPAA's report on Online Notorious Markets to the United States Trade Representative, said that the conclusion of 123movies, 123movieshub, gostream, and gomovies, by walking of a criminal examination in Vietnam in 2018, was "a significant turn of events" in combating illicit film theft administrations. In any case, the MPAA report additionally noticed that various copycat locales had risen in any event in eight different nations. In November 2018 TorrentFreak revealed locales associated or like 123Movies, for example, WatchAsap had additionally been closed somewhere around the FBI, yet were re-coordinating to other document sharing destinations.

    RépondreSupprimer
  15. We are providing the best students assignment writing help and we are offering law essay writing service and all type of essay at cheap price.



    RépondreSupprimer
  16. This exceptional black colored outfit is a perfect choice for this Halloween season as it has various distinctive styles and flaps in it. devil may cry 5 coat

    RépondreSupprimer
  17. Thanks for your article. It was interesting and informative.
    Here I also want to suggest your reader who usually travels one place to another they must visit Airlines Gethuman that offer best deals to book your seat on Delta Airlines Reservations. So do hurry and avail the best deals and get rid of to check different websites for offers.
    Get more help on
    Delta Reservations
    Delta Reservation
    Delta Flights Reservations
    Delta Airlines Reservations

    RépondreSupprimer
  18. Thanks for your article. It was interesting and informative.
    Here I also want to suggest your reader who usually travels one place to another they must visit Airlines Gethuman that offer best deals to book your seat on Delta Airlines Reservations. So do hurry and avail the best deals and get rid of to check different websites for offers.

    Southwest Airlines Reservations

    Southwest Airlines Flights

    RépondreSupprimer
  19. To be honest I found very helpful information your blog thanks for providing us such blogSyed Kirmani

    RépondreSupprimer
  20. Do you have norton antivirus and facing problem while scanning through norton antivirus and get norton error 8504

    RépondreSupprimer
  21. Thanks for your article. It was interesting and informative.
    Here I also want to suggest your reader who usually travels one place to another they must visit Airlines Gethuman that offer best deals to book your seat on Delta Airlines Reservations. So do hurry and avail the best deals and get rid of to check different websites for offers
    Southwest Airlines Flights

    RépondreSupprimer
  22. Airlines-gethuman.org is a platform where you can Find Contact Information for all the airlines, Assistance with booking your flights, and vacation packages easily. It helps you to save both, your money and your time.

    Delta Airline Reservations

    Delta Airlines Tickets

    Deltareservations

    RépondreSupprimer

  23. PC Matic is excellent antivirus software that can eliminate all types of virus threats from your system and make it clean and free of viruses. It has a very simple and friendly interface and is installed and can be wasted easily. Regardless of its different attractive features, sometimes, it creates some problems while working. Here you can easy way to read fix PC Matic Login not working issues.


    RépondreSupprimer
  24. Quickbooks is one of the best accounting software to handle business data very conveniently. The software is enriched with many premium features to grow your business. Transfer Quickbooks data to a new pc

    RépondreSupprimer
  25. The Delta Airlines is one in all the most important Airlines of United States. It is a legacy service and has its headquarters in Atlanta. In this article, we are able to have a study the system of booking the tickets with Delta Airlines. The whole little by little system of Delta Airlines Booking might be supplied that may be refereed on the time of booking.
    Now get Delta Airlines Booking, Book your Delta Airlines Reservations tickets with these simple steps. Our customer service 24*7 available.

    Source URL: https://www.800customernumber.net/

    RépondreSupprimer
  26. hp com setup - Get started with New HP printer setup. Download hp smart driver and install. Connect hp printer to wireless using 123.hp.com/setup driver.

    RépondreSupprimer



  27. watching your favorite movies and shows on a bigger screen. Here’s how you can watch Amazon Prime Video on
    TV! amazon.com/mytv



    RépondreSupprimer

  28. Users can install mcafee antivirus on their computer and keep protected by this kind of infection. Download and Install Mcafee through mcafee.com/activate . Sign in to your Mcafee account, activate Mcafee and enter Mcafee 25 digit activation code. create your Mcafee account to manage your Mcafee subscriptions.

    RépondreSupprimer
  29. Delta Airlines is known for offering the finest low-cost flights. It is one of the biggest airlines in the US. You may book your Delta Airlines reservations online via its official website to travel with the airline. You can also call Delta Airlines Reservations customer service 24/7 USA experts, who can support you 24×7. With the best response, you can answer all your questions.

    RépondreSupprimer
  30. Did you know that you can easily view the contents of your phone on your TV without a cable? With a screen mirror app you can easily do the screen mirroring from Android to TV. Check out www.screenmirroring.me to find out more.

    RépondreSupprimer
  31. Bit by bit direction to introduce 123.hp.com setup. Driver download, investigating, introducing measure, versatile printing, remote setup for all HP printers.

    RépondreSupprimer
  32. With Delta Airlines, You can explore amazing deals from time to time and book confidently as there is no change fee or award deposit fee. Know everything about Delta Airlines Reservations like, selecting your seats, changing your flight dates, check-in procedure, upgrading tickets to a higher class of service, and much more.

    RépondreSupprimer


  33. Watch Prime Video on Amazon My TV, users have to enter a 6-digit registration which you can visiting Amazon.com/mytv .Amazon Prime video is amazon streaming platform which is the main competitor of Netflix and other global streaming channels. You can watch your favorite movies and shows without any ads using amazon prime video. With the help of your Amazon Activation Code , users can easily activate their subscriptions on their smart TVs.



    RépondreSupprimer
  34. Is your Malwarebytes giving you sleepless nights these days? Do you find Malwarebytes unable to start with the start of the system? For these and similar other problems, simply dial 1-877-916-7666 and talk to our highly qualified engineer.

    RépondreSupprimer
  35. Checkout our website for buying guide about gas stoves.
    Hob top gas stove

    RépondreSupprimer
  36. I think this is an informative post and knowledgeable. I would like to thank you for the efforts you have made in writing this article Epson printer error code 0x69

    RépondreSupprimer
  37. Portfolio Management Services (PMS), service offered by the Portfolio Manager, is an investment portfolio in stocks, fixed income, debt, cash, structured products and other individual securities, managed by a professional money manager that can potentially be tailored to meet specific investment objectives. Visit lakewateradvisors

    RépondreSupprimer
  38. Excellent post! Your post is very useful and I felt quite interesting reading it. Expecting more post like this. Thanks for posting such a good post

    World of Cracks

    Windows
    Group of Several Proprietary Graphical Operating System
    Softwares
    Looking to Download Safe Free Versions
    Multimedia
    Multimedia Combines ElementsEdit Text, Image, Audio, Video, and Animation
    Games
    Game is a Structured Form of Playing

    RépondreSupprimer
  39. untold real horror story in hindi untold
    Come to my website to view the contents of my website.

    RépondreSupprimer
  40. This is a really helpful post, very informative there is no doubt about it. Thanks for sharing this information with us. I really appreciate your work. For booking cheap flights for the USA Please visit at:- Cheap flight deals.

    RépondreSupprimer
  41. Amazon.com/mytv is a registration portal of Amazon Prime from which members can watch thousands of movies and TV shows for free from their device some features require a premium subscription. The instant video service can only be watched after registering your device with a simple subscription code. The website for registering on Amazon prime is www.amazon.com/mytv. Amazon Prime Video is one of the most amazing and interesting platforms to watch. With Amazon Prime you can stream unlimited movies and TV episodes on Amazon prime video app.

    Amazon.com/mytv
    www.amazon.com/mytv

    RépondreSupprimer
  42. Tubi.tv is likewise accessible on an assortment of devices like Amazon Fire TV, ROKU, Playstations, and Smart TV or you can straightforwardly get to it through any of your internet browsers. As you are wondering that you have perused so a lot yet you knew nothing about how to get tubi.tv/activate then don’t you stress at all reason directly underneath we have gone to your guide with the Tubi Tv Activation measure.

    tubi.tv/activate
    tubi tv activate lg smart tv

    RépondreSupprimer
  43. Hii, I am Bella Gora from Los Angeles, CA. We are a third-party Roadrunner Email Service provider. If you want any assistance related to Roadrunner Support, so you can dial our toll-free number and visit our website for more information:

    Change Roadrunner Email Password
    Reset Roadrunner Email Password
    Forgot Spectrum Password
    General Roadrunner Email Problem
    TWC Email Not Working
    Roadrunner Email Not Working

    RépondreSupprimer
  44. Now you can Easily Activate Amazon by Amazon.com/mytv. It is a registration portal of Amazon Prime from which members can watch thousands of movies and TV shows for free from their device some features require a premium subscription. The instant video service can only be watched after registering your device with a simple subscription code. The website for registering on Amazon prime is amazon.com/mytv. Amazon Prime Video is one of the most amazing and interesting platforms to watch. With Amazon Prime you can stream unlimited movies and TV episodes on Amazon prime video app. You can Easily Fix Troubleshoot by visiting here.

    amazon com mytv

    RépondreSupprimer
  45. Activate amazon by visiting our website. Amazon Prime Video allows you to watch on-demand movies and TV shows via an app that you must install on your Samsung TV . You will also get original films, television series, and other entertaining content. To begin with any use of the advantages that come with your www.amazon.com/mytv nomination, it is important that you create a record on a similar platform. However, customers are likewise presented with the option to create a record in the hours of actuating from their membership. Visit here amazon.com/mytv

    www.amazon.com/mytv
    amazon.com/mytv

    RépondreSupprimer
  46. It is an Application It is very useful for clients in installing all the software and guide updates. At whatever point new updates are accessible, it gives you warnings. Clients can save their ideal guides and areas with Garmin Express and can see the information on the navigation device. Thus, garmin.com/express guarantees fast and exact navigation. This Software gives you Warnings, Offers and item Support. For Setup Gramin Express you need to Visit our website.

    garmin.com/express

    RépondreSupprimer
  47. Superb post! This post is very useful and I get interesting while reading it. Waiting for more post like this. Thanks for posting such a good post.
    To service your laptop with offer prices, Please visit : Laptop service center in Navalur

    RépondreSupprimer
  48. Hiii, I am Bella walson form USA.your post is very useful for me, if you want to know more AOL Desktop Gold then, you can visit our site Forgot Verizon Email Password for help.

    RépondreSupprimer
  49. I am a chartered accountant in Digital CA. I also want to share some information to those who are looking for Trade Mark Registration service In Delhi.
    Then DigitalCA helps you to register your Company, manage your business, and legal compliance in Delhi Noida. Trade Mark Registration, ESI Registration, PF Registration, GEM Registration, Company Incorporation, GST Registration, Accounting, Import-Export Code

    RépondreSupprimer
  50. Thank you for sharing your article and I hope you will share some more information about this. keep sharing!! and further If you're looking for a high-quality based web design company India, Matebiz is one of the best. We have a talented team that can build a responsive and mobile-friendly website for you. We are dedicated to providing you with high-quality, cost-effective services that will help you identify your brand and generate more traffic and conversation about your business. Matebiz also provides logo design, PPC management, and website creation services.


    RépondreSupprimer
  51. This is very interesting, You are a very skilled blogger. I've joined your feed and look ahead to searching for extra of your excellent post. Also, I have shared your website in my social network https://www.muttertagsprüche.com/

    RépondreSupprimer
  52. amazon.com/mytv Most importantly, switch on your Smart TV. Then visit amazon.com/mytv enter code Simple process to activate your Amazon prime video on your smart device or phone. Enter code mytv and click on the enter button. Then you see your Amazon prime account activate and you can easily watch your web shows, movies and videos. This purpose of this is to provide information about prime video activation. Users who are facing any problem to activate prime video in their smart TV, can read this and Visit our website.

    amazon.com/mytv
    www.amazon.com/mytv

    RépondreSupprimer
  53. I am a dietician and nutritionist in Dr Namita Nadar diet clinic. I also want to share some information to those who are looking for Best Dietitian For Weight Loss In Noida.
    Then Dr Namita Nadar diet clinic helps you to Weight Loss/ Management, Toning & Sculpting, Resistance Training, Muscle Building, Mobility / Flexibility, Planning & Periodisation for Acting and TV Roles Speed, Strength and Power Development,Nutritional Advice.

    Visit us at:-
    http://www.drnamitanadardietclinic.com/

    RépondreSupprimer
  54. Hi all. I would like to recommend one site to you. If you're new to dating sites, you'll definitely want to know if the tech support on the site is good. If this is your first time using a mail order bride site, you definitely want to know that there is someone there to answer your questions and give you the help you need. That's what customer support is for. If it's always available to members and willing to lend you a helping hand, that's a big reason to trust the site. That's why I recommend this particular site for buying a legit mail order bride!

    RépondreSupprimer
  55. Thanks for your blog. I also want to share some information with those who are looking for a new home in California, then please contact us. we are an innovative realtor of housesofpayne to help you to sell and buy homes, find the value of your home for real estate project anywhere in California or ca.
    Visit for more information on:
    Realtors in Nicasio ca
    Home Values in Petaluma ca

    RépondreSupprimer
  56. CLAADSS is a professional Free Classified Ads in India website that allows its members to create business connections, search jobs, and find potential clients.

    RépondreSupprimer
  57. Local Business Directory in India List In India, USA, Yellowpages, CLAADSS USA's No.1 Local Search Engine, business Directory United States, free Classifieds In India

    RépondreSupprimer
  58. Yellow Pages in India List In India, USA, Yellowpages, CLAADSS USA's No.1 Local Search Engine

    RépondreSupprimer
  59. Crafted for the sole purpose of General knowledge, News about the World, People, Universe, Animals, Health tips, Science, Weird news, Biography, Travel, news online

    RépondreSupprimer
  60. Want more views and subscribers for your youtube videos and channel..? Update your videos today and promote in a cost effective ways gain more views and subscribers | Youtubeviewsup - Youtube Video

    RépondreSupprimer
  61. తాజా తెలుగు వార్తలు, Get the lastest telugu Live news, telugu breaking news, Live news telugu, online telugu news తెలుగు వార్తలు Local telugu news, national news, Eeroju varthalu

    RépondreSupprimer
  62. Telugu varthalu. Online varthalu, News in English: Latest News, Breaking News, Live Updates, Eeroju varthalu, Online telugu news, Online Online News తెలుగు వార్తలు

    RépondreSupprimer
  63. Get Latest News, India News, Breaking News, Local news live, National news live, International News Live, Today's news live English News

    RépondreSupprimer
  64. తాజా తెలుగు వార్తలు, Get the lastest telugu Live news, telugu breaking news, Live news telugu, online telugu news Online news Local telugu news, national news, Eeroju varthalu

    RépondreSupprimer
  65. "GK Questions Check GK Questions Answers (General Knowledge Quiz), General Studies / General Awareness for various competitive exams schools, college, Jobs, Technical
    "

    RépondreSupprimer
  66. Sarees Online Site for Fashion & Lifestyle in India. Buy Sarees, dresses' online for women & men. Best Online Fashion Store

    RépondreSupprimer
  67. Our Texas medical billing services can make your practice more profitable by increasing incoming payments. There are no hidden costs or additional charges - Medical Billing Company in Texas

    RépondreSupprimer
  68. Are you in need of billing and consulting services? Visit Promedintelsoft, a healthcare revenue cycle management company that provides great service in Texas, California, US! - Medical Billing Company in USA

    RépondreSupprimer
  69. ACP Medical Billing provides a flexible array of medical billing and collection services to meet your specific needs. Talk to our Florida billing experts for more info. Medical Billing Company in Florida

    RépondreSupprimer
  70. ACP Billing is a Renowned Medical Billing Company in Florida, US. Providing all the Medical Billing Solutions for More Than 25+ Years - Ranked #1 for best in class - Medical Billing Company in USA

    RépondreSupprimer
  71. Check is the process of obtaining your boarding pass and getting your bags checked at the airport. This formality can be done at the airport or online by easily at British Airways Customer Service.

    RépondreSupprimer
  72. I am a dietician and nutritionist in Dr Namita Nadar diet clinic. I also want to share some information to those who are looking for best dietitian in noida.
    Then Dr Namita Nadar diet clinic helps you to Weight Loss/ Management, Toning & Sculpting, Resistance Training, Muscle Building, Mobility / Flexibility, Planning & Periodisation for Acting and TV Roles Speed, Strength and Power Development,Nutritional Advice.

    Visit us at:-
    https://www.drnamitanadardietclinic.com/

    RépondreSupprimer
  73. I am a dietician and nutritionist in Dr Namita Nadar diet clinic. I also want to share some information to those who are looking for Best Dietitian For Weight Loss In Noida.
    Then Dr Namita Nadar diet clinic helps you to Weight Loss/ Management, Toning & Sculpting, Resistance Training, Muscle Building, Mobility / Flexibility, Planning & Periodisation for Acting and TV Roles Speed, Strength and Power Development,Nutritional Advice.

    Visit us at:-
    http://www.drnamitanadardietclinic.com/

    RépondreSupprimer
  74. Judicial Adda is the professional educational institute providing online and offline coaching for preparation of Judicial Services Examinations.
    I also want to share some information to those who are looking for Judicial Study Centre.
    We provide best coaching and guidance for Provincial Civil Service PCS(J),Civil Judge (Junior Division) examination,
    Magistrate, Assistant Public Prosecutor (APP), Assistant Prosecuting Officer (APO), Higher Judicial Services examination (HJS),
    Judicial Services Grade 1 Exam and Grade 3 exam and all other law related exams.

    Visit us at:-
    https://www.judicialadda.in/

    RépondreSupprimer
  75. Dr Namita Nadar diet clinic is one of its own kind of weight loss center and slimming centre located in Noida, India. I also want to share some information to those who are looking for Weight loss centre in delhi ncr.
    Our weight loss program comprrises of Metabolic Boost Therapy, Good Food Good Nutrition, Clinical Correction,Counter Stress
    Coolshaping Treatment,Trilipo Maximus, Face Rejuvenation & Contouring.

    Visit us at:-
    https://www.drnamitanadardietclinic.com/

    RépondreSupprimer
  76. Most importantly, switch on your Smart TV. Then visit amazon.com/mytv enter code Simple process to activate your Amazon prime video on your smart device or phone. Enter code mytv and click on the enter button. Then you see your Amazon prime account activate and you can easily watch your web shows, movies and videos. it is also essential to enter the application stores and download the official Amazon Prime Video application My TV is an Amazon program that offers a simple interface to the My TV service through Amazon's own websites and software programs. As previously noted, the program uses a simple web interface which enables the user to watch various television stations in the United States and Canada.


    amazon.com/mytv
    amazon.com/mytv enter code


    RépondreSupprimer