# Copyright (c) 2014-2025 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: crypt ghouls, excobalt, shedding zmiy

# Reference: https://x.com/RexorVc0/status/1798967613785354530
# Reference: https://www.ptsecurity.com/ru-ru/research/pt-esc-threat-intelligence/ex-cobalt-go-red-tehnika-skrytogo-tunnelya/

lib.rest
rosm.pro
rpm-bin.link
setup.mom
upd-rkn.net
amd64.rpm-bin.link
base.upd-rkn.net
bot.upd-rkn.net
chifa.rpm-bin.link
ci.rpm-bin.link
ci.upd-rkn.net
collect.net.in
get.rpm-bin.link
get.setup.mom
get.upd-rk.net
get.upd-rkn.net
leo.rpm-bin.link
lib.rpm-bin.link
mtp.upd-rk.net
mtp.upd-rkn.net
narwhal.rpm-bin.link
ops.rpm-bin.link
pkg.collect.net.in
rhl.rpm-bin.link
rls.upd-rkn.net
source.rpm-bin.link
src.setup.mom
sula.rpm-bin.link
trust.setup.mom
unicorn.rpm-bin.link
wired.setup.mom

# Reference: https://rt-solar.ru/solar-4rays/blog/4333/ (# shedding zmiy)

0bitcoins.com
avptp.com
backconnect.org
eu-debian.com
netstaticpoints.com
onexboxlive.com
stoloto.ai
techcname.com
wsdjcvfv.com
