# Copyright (c) 2014-2025 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: craxsrat

# Reference: https://twitter.com/malwrhunterteam/status/1525459727970447362
# Reference: https://www.virustotal.com/gui/file/ef150299e0e1ada6ffd8e4d946ba44ecb46c4723215b365a0d0d48db4c176632/detection
# Reference: https://www.virustotal.com/gui/file/ebf12dd012657f7f5f07cfa01972953343e81ad7d07412c0ec7a18d7a55c5b61/detection
# Reference: https://www.virustotal.com/gui/file/55d59e334872fcb7db4cc75c66a8855cb2f4ea8d517f82c115dd293f69c72a97/detection
# Reference: https://www.virustotal.com/gui/file/3b325664ddaf55c3f86699e09b115c714795f1bfdeab27be4b164b1c55de7a80/detection
# Reference: https://www.virustotal.com/gui/file/0f8bed58419121ef529832c14b13c5121cf3c8826df5ff80afef41208de9531a/detection

197.203.1.251:4444
phenomenedz.ddns.net

# Reference: https://twitter.com/banthisguy9349/status/1782726481216462923

http://118.139.178.186
craxsrat.com

# Reference: https://x.com/P4nd3m1cb0y/status/1862485613154288046/history

craxsratv7.com

# Reference: https://x.com/banthisguy9349/status/1866816660537217188
# Reference: https://x.com/DaveLikesMalwre/status/1866838114192232947

craxs-rat.me
craxs-rat.net
craxsrat-news.com
craxsrat.xyz
craxsratandroid.in

# Reference: https://x.com/OwnerProcessID_/status/1920090626881729009
# Reference: https://app.validin.com/detail?find=Verifica%C3%A7%C3%A3o%20de%20Acesso&type=raw&ref_id=40b2f5f4b2a#tab=host_pairs (# 2025-05-07)

2playstore-app.com
3playstore-apps.com
affilisilva.com
aplicacionsegura.online
aplicativo-playstore.online
aplicativo-seguro.online
aplicativobaixar.online
aplicativoseguro.online
aplictaivoseguro.store
astrogigix.com
ateliedosperfumes.com.br
autoytgenius.site
baixaaplicativo.online
baixar-appcadastro.online
baixar-appseguro.online
baixar-seguro.online
baixaraplicativo-store.online
baixarapp-seguro.online
baixarapp.online
baixarapp.store
baixarapptrasnportes.online
baixarseguro.online
blog-brasil.site
communitytree.com.br
descargar-aplicacion.online
descargaraplicacion.online
descargaraplicacionsegura.online
descargasegura.online
descontodahora.com
docemomento.site
download-aplicativo.online
download-seguro.online
downloadaplicativo.online
downloadapp-seguro.online
downloadseguro-app.online
downloadseguroapp.online
dra-andreia.online
estrategiamdrr.site
estrelaamarela.com.br
formulaverdadera.site
futurolimpo.shop
guaxipark.pt
hoje-noticias.fun
hokaquiz.site
hoteldicopi.com
invisiblesystem.site
iptvitalypremium.online
italyiptvpremium.online
jcano.online
lemongreen.shop
localizacodigorastreio.site
localizadorerastreio.site
lotofacil-dez.pages.dev
luanburguerpro.com
lunardi.online
maisprazer.fun
mariaaparecida.online
mazariniadvocacia.com.br
mcdeliveryofertas.site
megaincrivel.com
nexoooweb.com.br
noticiaagora.fun
noticias-diarias.online
orusdesigner.com.br
playstore-apps.com
playstore-baixar.online
plenitudevital.fun
privacy-gemeasgiga.com
rastreiocompra.store
rodonaves.online
semdebitos.shop
theinvisible.fun
theinvisible.site
transportess.online
tubemastergpt.site
vivendo-certo.site
wwwrichsolutions.com
ytinvisible.site
zerodebitos.shop

# Reference: https://x.com/malwrhunterteam/status/1928063478478037364
# Reference: https://www.virustotal.com/gui/ip-address/147.93.37.204/relations
# Reference: https://app.validin.com/detail?type=raw&find=Verifica%C3%A7%C3%A3o+de+Acesso#tab=host_pairs (# 2025-05-29)
# Reference: https://www.virustotal.com/gui/file/7ae9dbbb199a771375dab29d5f6fab692230235cbd46e21add90fbf028c1130f/detection

appsegura.store
artesanadelucro.com
baixaapp.online
baixar-appseguro.online
baixar.shop
baixaraplicativo.store
baixarseguro.store
cinebox.baixar.shop
descargar-aplicacionsegura.online
descargarapp.store
download-seguro.store
downloadappseguro.online
downloadseguro.store
playbaixar.shop
pontoslivresclub.site
tranzili.online
starlink.baixar.shop

# Reference: https://x.com/Fact_Finder03/status/1939929586164195434

craxr.netlify.app
craxs-rat-seller.xyz
craxs-rat-selller.com
craxs-rat.top
craxsdevs.github.io
craxsrat.cc
craxsrat.dev
craxsrat.me
craxsrat.shop
craxsrat.su
craxsratbuy.store
minepi.work

# Reference: https://x.com/Fact_Finder03/status/1939976174739828906
# Reference: https://www.virustotal.com/gui/file/313ee8963e33d3f8dcf41f382dd0ab3439418fdaf9efc5742c9358d8a24411e6/detection

craxsrat.great-site.net

# Reference: https://app.validin.com/detail?find=Craxs%20RAT%20-%20Android%20Remote%20Control%20Tool%20%7C%20Craxsrat%2C%20Craxrat%2C%20Craxsrats&type=raw&ref_id=414c3a9b22e#tab=host_pairs (# 2025-07-01)
# Reference: https://app.validin.com/detail?find=98bbc044abd9e07a26f3f48e060d9232&type=hash&ref_id=414c3a9b22e#tab=host_pairs (# 2025-07-01)

arat.cc
craxsrat.link
minepi.autos
minepi.club
minepi.email
minepi.fans
minepi.fit
minepi.ink
minepi.link
minepi.plus
minepi.pro
minepi.pw
minepi.sale
minepi.space
minepi.team
minepi.tech
minepi.uno
minepi.xin
pi-wallet.cn
pinet.vin
spytool.cc
xiaolv.uno
craxsrat.spytool.cc

# Reference: https://x.com/Fact_Finder03/status/1939981012542357987

47.237.142.172:443
8.218.212.152:443
craxrat.pro
craxrat.vip
craxsrat7.shop
craxsratandroid.com

# Reference: https://app.validin.com/detail?type=raw&find=Craxs+RAT+-+* (# 2025-07-02)

craxrats.com
craxs-rat-selller.eth.limo
craxsrat.pages.dev
demo.craxs-rat-selller.eth.limo

# Reference: https://x.com/Fact_Finder03/status/1942910572657258940

craxs-rat-craxsrat.com

# Reference: https://x.com/Fact_Finder03/status/1943181919677505679

craxs-rat-craxsrat.net
craxs-rat.blog

# Reference: https://app.validin.com/detail?find=Craxs-RAT%20-%20Next-Gen%20Android%20Remote%20Management%20%7C%20craxs-rat.com&type=raw&ref_id=3c02a519dd7#tab=host_pairs (# 2025-07-12)

craxs-rat.com

# Reference: https://x.com/Fact_Finder03/status/1944295179864653839

craxs-rat.tech

# Reference: https://x.com/galkofahi/status/1950849361669214551
# Reference: https://www.virustotal.com/gui/ip-address/5.182.209.28/relations

craxsrat-craxrat-craxsrats-craxs-rat-official.net

# Reference: https://x.com/Fact_Finder03/status/1951595822564434192

craxs-rat.su
craxsrat.biz
craxsrat.info
craxsrat.online
craxsrat7.com

# Reference: https://x.com/Fact_Finder03/status/1964266355747684490
# Reference: https://app.validin.com/detail?find=ahmeterbuls.gmail.com&type=dom&ref_id=e36b7f7620b#tab=dns (# 2025-09-06)

craxsrat.eu
sikayettvar.com

# Misc

craxrat.com
