# Copyright (c) 2014-2021 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: alfonso stealer, collector stealer, detector stealer, hunter stealer

# Reference: https://twitter.com/ViriBack/status/1253857638607196162
# Reference: https://app.any.run/tasks/9d7710ad-18d6-4f1a-8f7f-25a6629049e4/
# Reference: https://www.virustotal.com/gui/file/eb1280c930b01b6b2930b926bd8b868312b74ab3b450afb2a216e08773b12bb9/detection
# Reference: https://www.virustotal.com/gui/domain/u6218636a7.ha004.t.justns.ru/relations

u6218636a7.ha004.t.justns.ru
u667503gif.ha004.t.justns.ru

# Reference: https://twitter.com/3xp0rtblog/status/1275063347424063489
# Reference: https://app.any.run/tasks/88fac00d-6a25-4869-af44-3955a53b6266/

data-collector.online

# Reference: https://twitter.com/3xp0rtblog/status/1327239694615257088
# Reference: https://app.any.run/tasks/acda3856-381d-4bfa-a576-2704d0cfcf86/
# Reference: https://www.virustotal.com/gui/file/30af8d3ec685a4a5669f1377bb74589772a0428d9daa214c179a795dcf4b9030/detection

193.124.66.33:2229

# Reference: https://twitter.com/3xp0rtblog/status/1324800226381758471
# Reference: https://www.virustotal.com/gui/file/8d28a885143b7327ca2db1f5fae20013591538c77941ae4244e67659943b31c1/detection
# Reference: https://app.any.run/tasks/5521e858-aa80-4c07-b4bb-0b97ab2f28e1/

95.215.206.139:2222

# Reference: https://twitter.com/3xp0rtblog/status/1344352253294104576
# Reference: https://app.any.run/tasks/1dba5a2e-9e11-4fb4-a7d5-89f71b4bb876/
# Reference: https://www.virustotal.com/gui/file/92175f70c2e1472fcb742e9dc4939a48da8ae6f02d0177a2387be4235b0b1b23/detection

94.103.84.193:2222
