# Copyright (c) 2014-2025 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://www.cleafy.com/cleafy-labs/playpraetors-evolving-threat-how-chinese-speaking-actors-globally-scale-an-android-rat
# Reference: https://app.validin.com/detail?find=154.90.58.26&type=ip4&ref_id=50f2dcbca67#tab=resolutions
# Reference: https://app.validin.com/detail?find=156.244.19.63&type=ip4&ref_id=538ae2b951b#tab=resolutions
# Reference: https://www.virustotal.com/gui/file/1b022ac761a077f0116bb427b6cf8315a86aa654ae0cd55a6616647bbeb769c4/detection
# Reference: https://www.virustotal.com/gui/file/d392372928571662e4e59b0e3ff52a0e39a8f062633a4f5bdafc681bcdcdcf22/detection

199.247.6.61:1935
199.247.6.61:8282
atdfp.top
atubh.top
bcgrt.top
bekmc.top
bhtea.top
byhga.top
cdspw.top
cfdta.top
cmatk.top
ctdqa.top
dacmj.top
djp.agency
djp.buzz
djp.center
djp.company
djp.services
djpid.com
fcewa.top
fdtya.top
fhkaw.top
fkqed.top
fsckk.top
gtuaw.top
hekbb.top
hgcks.top
hgtmy.top
hytsa.top
id-djp.com
jewrs.top
jygst.top
kasmc.top
kmyjh.top
kshyq.top
kyhbc.top
kyudfsaugsda.top
m-pajak.top
mcspa.top
megha.top
mkstq.top
mygta.top
npkms.top
nsjap.top
pajak.services
perfectloveaa.top
pkdcp.top
pknby.top
pmsta.top
pyane.top
pyfcf.top
sakiw.top
snbyp.top
spwtt.top
taewa.top
askkpl67.top
cnhau1wq.top
fsdlaowaa.top
mskisdakw.top

# Reference: https://x.com/Hexnaut/status/1955912690062254570
# Reference: https://www.virustotal.com/gui/ip-address/156.244.58.221/relations
# Reference: https://app.validin.com/detail?find=45.250.197.58&type=ip4&ref_id=7bc35b5d766#tab=resolutions

acnnyh.top
ajsuqy.top
akrush.top
bttafw.top
ccwedd.top
cfatwk.top
facaiyo.xyz
facebooka.top
ffdanj.top
gawhh.top
gofake.top
gogohot.top
hcctwe.top
hhybca.top
hihilook.top
kasdeq.top
kgdpe.top
loan1service.icu
meepsa.top
mjhvaa.top
mjytw.top
mmtgyk.top
mttasw.top
online1loan.icu
online1loan.top
rbgz.art
sakiwc.top
sevisntkshop.top
skkvwe.top
skpsq.top
tikkoyk.top
tkonshop.top
tkshop.click
tlinkokk.top
tlinkonk.top
tooyu.top
towpage.top
triipadvisoor.top
tripadvisorr.top
tssknv.top
vtfgws.top
wyhgaa.top
1.facaiyo.xyz
tiktokk.loan1service.icu

# Reference: https://app.validin.com/detail?find=45.114.127.156&type=ip4&ref_id=9a9f7f94892#tab=resolutions (# 2025-08-14)

0884.top
116117.top
1273.top
2171.top
2938.top
3171.top
3243.top
4740.top
51face.top
51host.top
51redbook.top
51tem.top
51tik.top
5754.top
6022.top
6033.top
6174.top
6488.top
6706.top
6708.top
6745.top
6846.top
7010.top
7065.top
7086.top
7124.top
7174.top
7271.top
8095.top
8201.top
8912.top
9071.top
91health.top
91host.top
91info.top
91lox.top
91ranking.top
91rose.top
91seconds.top
91taichi.top
9220.top
96game.top
allfapp.top
allpick.top
apkguud.top
appguud.top
baceiu.top
bacto.top
bactu.top
baeih.top
baengm.top
baingq.top
baiuy.top
bakayook.top
bakie.top
bakiu.top
baktu.top
banggo.top
baniy.top
banui.top
banuk.top
baojl.top
baojr.top
baojti.top
baojtu.top
baotue.top
bapsi.top
bauie.top
bauih.top
bauik.top
bauuy.top
bbffn.top
beeik.top
beeim.top
bektu.top
bestbus.top
bestroman.top
bestyak.top
bkkbi.top
bkpsi.top
bkrongshu.top
bkuti.top
bkuto.top
blbft.top
bnbxn.top
bnrrl.top
bokae.top
bokie.top
boomha.top
bouncebrains.top
brjjp.top
bubblebrawl.top
bunuk.top
buzzyu.top
bvxln.top
byyook.top
bzdlz.top
bzxxz.top
carnivall.top
catden.top
chillloop.top
chilltimee.top
chillxy.top
ciugame.top
cocoplay.top
comedysky.top
cooeasy.top
couchchaos.top
cougame.top
coukapp.top
couponscode.top
couponsi.top
cweng.top
cwenh.top
cxfdfli.top
dancefloor.top
dellu.top
diname.top
dkyer.top
doulefun.top
droptime.top
dzoif.top
easyzoo.top
echoease.top
ewrwer.top
exspeed.top
fableflick.top
facaiku.top
face360.top
facetik.top
faduy.top
fakuki.top
farmfrenzy.top
fawis.top
fbddk.top
fdlvv.top
feruh.top
ferui.top
ferun.top
ffbhv.top
fgddk.top
fgdek.top
fgkiy.top
fgkuy.top
fhxxj.top
findcons.top
firstmoving.top
fjpnt.top
fjtjf.top
fjztf.top
fkanr.top
fkans.top
fkbuy.top
fkdek.top
fkdso.top
fkeni.top
fkenj.top
fkenm.top
fkenp.top
fkenu.top
fkenx.top
fkeny.top
fkenz.top
fkgame.top
fkiapp.top
fkinb.top
fkinf.top
fkinj.top
fkink.top
fkinp.top
fkinr.top
fkinx.top
fkinz.top
fkkbi.top
fkker.top
fkket.top
fkkuy.top
fknat.top
fknum.top
fknye.top
fkogame.top
fkpsi.top
fktnz.top
fkuer.top
fkuiy.top
fkunb.top
fkung.top
fkunk.top
fkunn.top
fkunp.top
fkunq.top
fkunr.top
fkuns.top
fkunt.top
fkunw.top
fkunx.top
fkuny.top
fkunz.top
fkuye.top
fkuyek.top
fkuyel.top
fkuyer.top
fkuyo.top
fkuyok.top
fkuyt.top
fkuyub.top
fkvek.top
fkvnb.top
fkvnc.top
fkvnd.top
fkvnf.top
fkvng.top
fkvnh.top
fkvnj.top
fkwni.top
fkwok.top
fkwos.top
fkyap.top
fkyapk.top
fkyapp.top
fkyer.top
fkyuir.top
flashjoy.top
fly360.top
flyauto.top
flyword.top
fmka.top
fmkak.top
fntrv.top
fnukb.top
fnxtt.top
fokae.top
fokak.top
fpdbr.top
fpdhx.top
frbdp.top
freeload.top
frpvb.top
frzpd.top
ftprr.top
ftvhl.top
ftyka.top
fukogame.top
fukta.top
fukte.top
fuktte.top
funkapop.top
funkey.top
funnwave.top
funnydue.top
funnytop.top
funtag.top
funuk.top
funum.top
funzoo.top
furryfables.top
fuute.top
fwrwer.top
fwrwergames.top
fxnhn.top
fxphd.top
fypsi.top
fzhtj.top
gaker.top
gakur.top
gameaps.top
gameeww.top
gameigg.top
gameitt.top
gameiu.top
gameopp.top
gameops.top
gamerip.top
gameriu.top
gamerts.top
gamertti.top
gameuau.top
gamezonee.top
gayqkk.top
gblhh.top
gcmcg.top
gddxf.top
gdnrh.top
ggaack.top
gigglo.top
gkkur.top
glitchglee.top
gnbxl.top
gnnff.top
gogovo.top
gokcui.top
googoing.top
googooing.top
gotpros.top
gouyb.top
gpflx.top
gptzn.top
gqeaaw.top
grker.top
gtdhd.top
guguing.top
gwwgga.top
gxeny.top
gxenz.top
gxinb.top
gxinc.top
gxind.top
gxinf.top
gxingk.top
gxingl.top
gxingy.top
gxingz.top
gxinh.top
gxinj.top
gxink.top
gxinl.top
gxinm.top
gxinn.top
gxinp.top
gxinq.top
gxinr.top
gxins.top
gxint.top
gxinw.top
gxinx.top
gxinz.top
gxkyd.top
gxongb.top
gxongc.top
gxongd.top
gxongf.top
gxongg.top
gxongh.top
gxongj.top
gxongk.top
gxongm.top
gxongn.top
gxongp.top
gxongq.top
gxongr.top
gxongs.top
gxongt.top
gxongw.top
gxunb.top
gxunc.top
gxund.top
gxunl.top
gxunm.top
happychat.top
happygoo.top
happypick.top
hbfhr.top
hbjpb.top
hbtnb.top
healthfit.top
hebuqi.top
hfnjt.top
hihilook.top
hnffz.top
hnvzd.top
hrieb.top
hriec.top
hried.top
hrief.top
hrieg.top
hrieh.top
hriem.top
hrier.top
hriub.top
hriuc.top
hriud.top
hriuf.top
hriug.top
hriuh.top
hriuj.top
hriuk.top
hriul.top
hrium.top
hriun.top
hriup.top
hriuq.top
hriur.top
hrius.top
hriut.top
hriuw.top
hriux.top
hriuy.top
hriuz.top
hroug.top
hrouh.top
hrouj.top
hrouk.top
hroul.top
hroum.top
hroun.top
hroup.top
hrouq.top
hrour.top
hrous.top
hrout.top
hrouw.top
hroux.top
hrouy.top
hrouz.top
htbzb.top
hustlehaven.top
hvfxn.top
hzvxv.top
ideafly.top
jakfall.top
jbeim.top
jbein.top
jbeip.top
jbeiq.top
jbeir.top
jbeis.top
jbeit.top
jbeiw.top
jbeix.top
jbeiy.top
jbeiz.top
jbuib.top
jbuic.top
jbuid.top
jbuif.top
jbuig.top
jbuih.top
jbuij.top
jellyjoy.top
jiajisu.top
jiasuanshijian.top
jiasuja.top
jivejoust.top
joyrid.top
joyyhub.top
jumjoy.top
justgoing.top
kdaoj.top
kdaok.top
kdaol.top
kdaom.top
kdaon.top
kdaop.top
kdaoq.top
kdaor.top
kdaos.top
kdaot.top
kdaow.top
kdaox.top
kdaoy.top
kdaoz.top
kdoub.top
kdouc.top
kdoud.top
kdouf.top
kdoug.top
kdouh.top
kdouj.top
kdouk.top
kdoul.top
kelemen.top
kjljk.top
kknet.top
kktimee.top
kmeioo.top
kmitti.top
kmtti.top
kmtto.top
kuere.top
kukta.top
kukte.top
kukti.top
kusif.top
kuter.top
kutiiem.top
kuyer.top
kxingq.top
kxingr.top
kxings.top
kxingt.top
kxingw.top
kxingx.top
kxingy.top
kxingz.top
kxongb.top
kxongc.top
kxongd.top
kxongf.top
kxongg.top
kxongh.top
kxongj.top
kxongk.top
kxongl.top
laughhub.top
laughlobby.top
lefunn.top
likeabc.top
link91.top
liprain.top
logala.top
lonest.top
longdit.top
loopanda.top
loopdeep.top
loopp.top
looworld.top
lovofire.top
lovokan.top
lovoloon.top
lraom.top
lraon.top
lraop.top
lraoq.top
lraor.top
lraot.top
lraow.top
lraox.top
lraoy.top
lraoz.top
lroub.top
lrouc.top
lroud.top
lrouf.top
lroug.top
lrouh.top
lrouj.top
lrouk.top
lroul.top
lroum.top
lroun.top
lrouq.top
lunalaugh.top
maomq.top
miivcoo.top
mikiwood.top
mini360.top
minihost.top
mixmi.top
mkite.top
mkute.top
mkuti.top
moonseek.top
mterb.top
mterd.top
mterf.top
mterg.top
mterh.top
mterj.top
mterk.top
mtieb.top
mtiec.top
mtied.top
mtief.top
mtiem.top
mtien.top
mtiep.top
mtieq.top
mtier.top
mties.top
mtiet.top
mtiew.top
mtiex.top
mtiey.top
mtiez.top
mtiur.top
mtiuw.top
mtiux.top
mtiuy.top
mtiuz.top
mtouk.top
mtveb.top
mtvec.top
mtved.top
mtvef.top
mtvem.top
mtves.top
mtvet.top
mtvex.top
mtvey.top
mtvez.top
nfiud.top
nfiuf.top
nfiug.top
nfiuh.top
nfiuj.top
nfiuk.top
nfiul.top
nfium.top
nfiun.top
nfiup.top
nfiuq.top
nfiur.top
nfiuw.top
nfiux.top
nfiuy.top
nfout.top
nfouw.top
nfoux.top
nfouy.top
nfouz.top
nikafee.top
oiyci.top
onefifi.top
oummg.top
partypals.top
pepzone.top
playdoz.top
pocfire.top
popzoo.top
qcywk.top
qerky.top
qierk.top
qierr.top
qkinl.top
qkinm.top
qkinn.top
qkinp.top
qkinq.top
qkinr.top
qkins.top
qkint.top
qkinw.top
qkinx.top
qkinz.top
qkunb.top
qkunc.top
qkund.top
qkunf.top
qkung.top
qkunh.top
qkunj.top
qurky.top
quweii.top
redtech.top
rhythmriot.top
rightkit.top
rijibiao.top
rukem.top
sdfiif.top
slowspeek.top
sodoe.top
sokrt.top
sokum.top
sonum.top
sosujk.top
sparkpop7.top
stockluy.top
sukela.top
sunnyplay.top
supbook.top
superkey.top
switchinfo.top
ticklefu.top
tiletango.top
timebb.top
timebr.top
timeek.top
timekk.top
timiett.top
tomobile.top
topfack.top
topmoney.top
ttcoupon.top
ttlike.top
usdkit.top
vafire.top
vibefun.top
vibeparty.top
viviyaka.top
vogrok.top
vooblok.top
vooling.top
vooseek.top
vowinner.top
wavelark.top
webwink.top
whimsywarriors.top
wiifell.top
wikifool.top
wikkcat.top
witv.top
wordai.top
woukj.top
wouyd.top
wouyt.top
wowyo.top
wuiti.top
wuity.top
wukte.top
wukti.top
xiangqigan.top
xigua77.top
xingqiji.top
yaekr.top
yaeuk.top
yahol.top
yaochu.top
yaohi.top
yaokb.top
yinyangri.top
ykuyr.top
yofly.top
yoohu.top
yooklook.top
yooying.top
youkuyi.top
yowin.top
yoyoz.top
yuona.top
yyplane.top
zchue.top
zchuy.top
zcsdfa.top
zestzone.top
zkib.top
zkibo.top
zkif.top
zoiuc.top
zoiug.top
zoiuh.top
zoiuj.top
zoiuk.top
zoiul.top
zoium.top
zoiun.top
zoiuq.top
zoouw.top
zxked.top
zzgyi.top
zzhue.top
zzhui.top
zzsio.top

# Reference: https://dti.domaintools.com/spynote-malware-part-2/
# Reference: https://www.virustotal.com/gui/ip-address/171.22.18.110/relations

antquha8899.top
kmksiaq6688.top
nhy58awn.top
sakjhu5588.top

# Reference: https://www.virustotal.com/gui/ip-address/80.240.31.120/relations
# Reference: https://app.validin.com/detail?find=7e1ecc4764e985748bc2e2f077c399a8&type=hash&ref_id=edf2568e683#tab=host_pairs (# 2025-08-26)
# Reference: https://app.validin.com/detail?find=ff9930dbdd973cb5cbfb3f4dab86063b&type=hash&ref_id=1713fc1309c#tab=host_pairs (# 2025-08-26)

kiso8c6a9w.top
tsa9w18q6.top
sakja8da99k.top
