# Copyright (c) 2014-2024 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://securelist.com/ztorg-from-rooting-to-sms/78775/

c.phaishey.com
down.rbksbtmk.com
global.621.co

# Reference: https://securelist.com/ztorg-money-for-infecting-your-smartphone/78325/

/igq/api/
active.agoall.com/gnview/api/
api.agoall.com/only/
api.ddongfg.com/pilot/api/
api.jigoolng.com/only/
a.gqkao.com/igq/api/
a.apaol.com/igq/api/
c.oddkc.com/igq/api/
d.oddkc.com/igq/api/
dow.nctylmtp.com
em.kmnsof.com/only
g.ieuik.com
log.agoall.com/gkview/info/
newuser.agoall.com/oversea_adjust_and_download_write_redis/api/download/
oymg.themdspts.com