# Copyright (c) 2014-2023 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://www.threatfabric.com/blogs/xenomorph-a-newly-hatched-banking-trojan.html

art12sec.ga
kart12sec.gq
simpleyo5.cf
simpleyo5.tk
homeandofficedeal.com

# Reference: https://twitter.com/midnight_comms/status/1536430749221625859
# Reference: https://www.virustotal.com/gui/ip-address/51.210.135.15/relations

mobilsiparisver.com
x2u2.art
x2u2k.com
x2y2.lol
x2y2k.com
promo.x2u2.art
promo.x2u2k.com
promo.x2y2.lol
promo.x2y2k.com

# Reference: https://www.threatfabric.com/blogs/xenomorph-v3-new-variant-with-ats.html
# Reference: https://otx.alienvault.com/pulse/640ff37d304100830509a3a7

cofi.hk
dedeperesere.xyz
had0.live
jobviewer.co
mi1kyway.tech
vldeolan.com
inj.had0.live
team.mi1kyway.tech