# Copyright (c) 2014-2025 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: craxsrat

# Reference: https://twitter.com/malwrhunterteam/status/1525459727970447362
# Reference: https://www.virustotal.com/gui/file/ef150299e0e1ada6ffd8e4d946ba44ecb46c4723215b365a0d0d48db4c176632/detection
# Reference: https://www.virustotal.com/gui/file/ebf12dd012657f7f5f07cfa01972953343e81ad7d07412c0ec7a18d7a55c5b61/detection
# Reference: https://www.virustotal.com/gui/file/55d59e334872fcb7db4cc75c66a8855cb2f4ea8d517f82c115dd293f69c72a97/detection
# Reference: https://www.virustotal.com/gui/file/3b325664ddaf55c3f86699e09b115c714795f1bfdeab27be4b164b1c55de7a80/detection
# Reference: https://www.virustotal.com/gui/file/0f8bed58419121ef529832c14b13c5121cf3c8826df5ff80afef41208de9531a/detection

197.203.1.251:4444
phenomenedz.ddns.net

# Reference: https://twitter.com/banthisguy9349/status/1782726481216462923

http://118.139.178.186
craxsrat.com

# Reference: https://x.com/P4nd3m1cb0y/status/1862485613154288046/history

craxsratv7.com

# Reference: https://x.com/banthisguy9349/status/1866816660537217188
# Reference: https://x.com/DaveLikesMalwre/status/1866838114192232947

craxs-rat.me
craxs-rat.net
craxsrat-news.com
craxsrat.xyz
craxsratandroid.in

# Reference: https://x.com/OwnerProcessID_/status/1920090626881729009
# Reference: https://app.validin.com/detail?find=Verifica%C3%A7%C3%A3o%20de%20Acesso&type=raw&ref_id=40b2f5f4b2a#tab=host_pairs (# 2025-05-07)

2playstore-app.com
3playstore-apps.com
affilisilva.com
aplicacionsegura.online
aplicativo-playstore.online
aplicativo-seguro.online
aplicativobaixar.online
aplicativoseguro.online
aplictaivoseguro.store
astrogigix.com
ateliedosperfumes.com.br
autoytgenius.site
baixaaplicativo.online
baixar-appcadastro.online
baixar-appseguro.online
baixar-seguro.online
baixaraplicativo-store.online
baixarapp-seguro.online
baixarapp.online
baixarapp.store
baixarapptrasnportes.online
baixarseguro.online
blog-brasil.site
communitytree.com.br
descargar-aplicacion.online
descargaraplicacion.online
descargaraplicacionsegura.online
descargasegura.online
descontodahora.com
docemomento.site
download-aplicativo.online
download-seguro.online
downloadaplicativo.online
downloadapp-seguro.online
downloadseguro-app.online
downloadseguroapp.online
dra-andreia.online
estrategiamdrr.site
estrelaamarela.com.br
formulaverdadera.site
futurolimpo.shop
guaxipark.pt
hoje-noticias.fun
hokaquiz.site
hoteldicopi.com
invisiblesystem.site
iptvitalypremium.online
italyiptvpremium.online
jcano.online
lemongreen.shop
localizacodigorastreio.site
localizadorerastreio.site
lotofacil-dez.pages.dev
luanburguerpro.com
lunardi.online
maisprazer.fun
mariaaparecida.online
mazariniadvocacia.com.br
mcdeliveryofertas.site
megaincrivel.com
nexoooweb.com.br
noticiaagora.fun
noticias-diarias.online
orusdesigner.com.br
playstore-apps.com
playstore-baixar.online
plenitudevital.fun
privacy-gemeasgiga.com
rastreiocompra.store
rodonaves.online
semdebitos.shop
theinvisible.fun
theinvisible.site
transportess.online
tubemastergpt.site
vivendo-certo.site
wwwrichsolutions.com
ytinvisible.site
zerodebitos.shop

# Reference: https://x.com/malwrhunterteam/status/1928063478478037364
# Reference: https://www.virustotal.com/gui/ip-address/147.93.37.204/relations
# Reference: https://app.validin.com/detail?type=raw&find=Verifica%C3%A7%C3%A3o+de+Acesso#tab=host_pairs (# 2025-05-29)
# Reference: https://www.virustotal.com/gui/file/7ae9dbbb199a771375dab29d5f6fab692230235cbd46e21add90fbf028c1130f/detection

appsegura.store
artesanadelucro.com
baixaapp.online
baixar-appseguro.online
baixar.shop
baixaraplicativo.store
baixarseguro.store
cinebox.baixar.shop
descargar-aplicacionsegura.online
descargarapp.store
download-seguro.store
downloadappseguro.online
downloadseguro.store
playbaixar.shop
pontoslivresclub.site
tranzili.online
starlink.baixar.shop

# Misc

craxrat.com
