# Copyright (c) 2014-2021 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: cryptobot

# Reference: https://twitter.com/benkow_/status/1148921178741977088
# Reference: https://app.any.run/tasks/de5467b2-4047-4b6e-9d93-06a23c1745f4/

http://87.251.84.194
gdeed.info
hhhh1.info

# Reference: https://twitter.com/benkow_/status/1148910014192672769

opip.info
opip2.info
opip3.info
opip4.info
opip5.info
hoov1.info
hoov2.info

# Reference: https://twitter.com/benkow_/status/1191353516914335745

fauuu2.info
razraz.info

# Reference: https://app.any.run/tasks/2b387ec6-daa9-4b21-b526-e2220fefbf1a/

newyaer01.top

# Reference: https://twitter.com/JAMESWT_MHT/status/1220714195978801152
# Reference: https://app.any.run/tasks/f8d6ecea-ac20-4a8e-8c4e-0a89efc53812/
# Reference: https://www.virustotal.com/gui/ip-address/8.209.74.136/relations

cede02.info
cede03.info
cede04.info

# Reference: https://www.virustotal.com/gui/file/5804f69f769d159573611be75723e6e0d017aee05b329b201c3c6ace0650e5f0/detection

bbu03.pro

# Reference: https://app.any.run/tasks/de8dc698-6f59-43ca-a465-3baee439b34d/

biss01.info

# Reference: https://twitter.com/benkow_/status/1224700401691262976

assa1.info
buur01.info
buur03.info
cloudss1.info
cloudss12.info
cloudss13.info
cloudss14.info
dee02.info
dodo1.info
dodo2.info
doed2.info
dva02.top
dvazdvaz.info
fauuu2.info
fauuu4.info
ggaas1.info
ggaas2.info
gggg02.info
hoov1.info
hoov2.info
jii1.info
ked02.info
kk02.info
kkk1.info
ky01.info
lq02.top
lyn02.info
lynnew.info
magazzz.top
maww2.info
mihh1.info
mihh2.info
opa01.top
opip.info
opip2.info
opip3.info
opip4.info
opip5.info
paneldvaz.info
panelraz.indo
per01.top
per02.xyz
poped1.info
poped2.info
ra02.info
razraz.info
saas01.pro
saas02.pro
sx01.info
testik05.info
toptop02.info
vremen.top

# Reference: https://app.any.run/tasks/426fdf38-15ef-4417-b5c0-9403de8e7b20/

kora01.info

# Reference: https://www.virustotal.com/gui/ip-address/46.29.164.54/relations

cloudss1.info
cloudss12.info
cloudss13.info
cloudss14.info
interload.info
kload01.info
kload02.info
load002.info
load003.info
loddd01.info
lodddd01.info
marggg.info
newazo.info

# Reference: https://twitter.com/killamjr/status/1232407051441254401
# Reference: https://app.any.run/tasks/94d923ee-43ed-43f9-b892-8b6d649bc1e4/

downloadserver1.club
jload03.info
nife01.info

# Reference: https://www.virustotal.com/gui/ip-address/8.208.19.185/relations

cede01.info
cede02.info
cede03.info
looo02.info

# Reference: https://app.any.run/tasks/e89173e6-eabc-44f5-899a-69945b914773/

lerm03.info
jjload03.top
lerm04.info

# Reference: https://www.virustotal.com/gui/ip-address/8.209.70.110/relations

intervpnload.info
marload.info

# Reference: https://twitter.com/James_inthe_box/status/1248964446505947136
# Reference: https://app.any.run/tasks/4cc95d8b-f2c7-457d-97d2-991d0115c1b4/

ddload01.top
minorr03.top

# Reference: https://twitter.com/ViriBack/status/1254910564998012929
# Reference: https://app.any.run/tasks/f5e5b2ef-f3f6-48a4-a4f3-09b3b2796fb3/
# Reference: https://www.virustotal.com/gui/domain/screencast-o-matic-affiliate.com/relations

aaload02.top
kafurr03.top
stiff02.top
screencast-o-matic-affiliate.com

# Reference: https://twitter.com/ViriBack/status/1254914085025693696

interr01.top
moraa01.top

# Reference: https://twitter.com/DrStache_/status/1255062944536240128

aaload03.top
filelo02.top

# Reference: https://app.any.run/tasks/66411472-f365-4254-bf77-46ea1be34c6e/

asload03.top
moraa05.top
sasurr02.top

# Reference: https://app.any.run/tasks/8788be1d-4d0e-4631-8174-6d8eb036b874/

magnar01.top
moraa08.top

# Reference: https://urlhaus.abuse.ch/downloads/text_recent/

filelss01.top
filelss02.top
filelss03.top
filelss04.top
filelss05.top
filelss06.top
filelss07.top
filelss08.top
filelss09.top
rrrrload01.top
rrrrload02.top
rrrrload03.top
rrrrload04.top
rrrrload05.top
rrrrload06.top
rrrrload07.top
rrrrload08.top
rrrrload09.top

# Reference: https://twitter.com/James_inthe_box/status/1283880360808288257
# Reference: https://app.any.run/tasks/d3818d54-6e1a-42bf-a59e-95a6e291c6f9/

kkipp03.top
torikk06.top
twors03.top

# Reference: https://app.any.run/tasks/856205b3-2152-40b6-b945-431c837b829b/

nkoopw16.top

# Reference: https://www.virustotal.com/gui/ip-address/8.208.79.157/relations

asload01.top
asload02.top
filelo08.top

# Reference: https://www.virustotal.com/gui/file/73ad7dec6b105108006dc96105d31af2226267f973735d2a4d608c2770fe6353/detection
# Reference: https://www.virustotal.com/gui/ip-address/8.208.16.142/relations

fasters02.top
fasters03.top
minorr02.top
minorr03.top

# Reference: https://www.virustotal.com/gui/ip-address/8.209.77.15/relations

kafurr03.top
minorr01.top
minorr04.top
minorr05.top

# Reference: https://www.virustotal.com/gui/file/d85168dbc54da4f1332f29314041cc2456bf94cd664265c731245be03d243981/detection

103.91.210.187:1000
103.91.210.187:886
jjload01.top
jjload02.top
jjload03.top
jjload04.top
jjload05.top
jjload06.top
zqload01.top
zqload02.top
zqload03.top
zqload04.top
zqload05.top
zqload06.top
stiff01.top
stiff02.top
stiff03.top
stiff04.top
stiff05.top
stiff05.top

# Reference: https://twitter.com/wwp96/status/1327904475168862208
# Reference: https://twitter.com/wwp96/status/1327907659782172679
# Reference: https://www.virustotal.com/gui/ip-address/193.106.175.25/relations

kirraadd03.top
kirraadd05.top
kirraadd06.top
kirraadd13.top
kirraadd444.top
lovehaircut.top
moraatwoo04.top
moraatwoo06.top
moraatwoo07.top
porkte01.top
porkte02.top
porkte03.top
porkte04.top
porkte12.top

# Reference: https://www.virustotal.com/gui/ip-address/47.254.173.45/relations

cloud001.info
cloud002.info
frttload04.top
frttload05.top
frttload06.top
frttload11.top
frttload12.top
frttload13.top
gfiles03.top

# Reference: https://twitter.com/Marco_Ramilli/status/1328242724722642945
# Reference: https://www.virustotal.com/gui/ip-address/193.34.166.70/relations
# Reference: https://www.virustotal.com/gui/file/81b267cb792ea2bff433a3b458a20fb064b092e65d08dabc1844f225a04191d2/detection
# Reference: https://www.virustotal.com/gui/file/22bd94148c54184fca5faa9c211cb54fae37174cf38dc588f483299ae5994752/detection

193.34.166.70:443
23.254.118.230:443

# Reference: https://twitter.com/wwp96/status/1335670395157032963
# Reference: https://app.any.run/tasks/5c601d8b-4496-4086-bdcc-f395cc23ada5/
# Reference: https://www.virustotal.com/gui/ip-address/45.142.213.98/relations

aezakmiv51.top
humusser27.top
leribis11.top
leribis13.top
leribis14.top
leribis15.top
leribis16.top
leribis17.top
moraffdd06.top
serfrload05.top
serfrload06.top
serfrload07.top

# Reference: https://twitter.com/0xFrost/status/1205927089691648002
# Reference: https://www.virustotal.com/gui/ip-address/8.209.74.77/relations

bbu01.pro
bbu02.pro
hio01.pro
lqo01.pro
lqo02.pro
lqo03.pro
redf01.pro
wwpp02.top
wwpp03.top

# Reference: https://www.virustotal.com/gui/ip-address/8.211.23.107/relations

futterrr01.top
futterrr02.top
futterrr03.top
futterrr04.top
futterrr05.top
futterrr06.top
futterrr07.top
gfiles01.top
gfiles02.top
loaadkkkk11.top
loaadkkkk14.top
loaadkkkk15.top
nffiiload01.top
nffiiload02.top
nffiiload03.top
nffiiload04.top
nffiiload05.top
nffiiload06.top
nffiiload07.top
nffiiload08.top
nffiiload09.top
nffiiload11.top
nffiiload12.top
nffiiload13.top
nffiiload14.top
xerrrload01.top
xerrrload02.top
xerrrload03.top
xerrrload04.top
xerrrload05.top
xerrrload06.top
xerrrload07.top
