# Copyright (c) 2014-2022 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://twitter.com/felixaime/status/1509896389165264922
# Reference: https://www.virustotal.com/gui/collection/f2b94d10490b9fe245894787927c855965f50d73b1329cb639eaa8cbbd32d5a9
# Reference: https://7095517.fs1.hubspotusercontent-na1.net/hubfs/7095517/%5BMarketing%5D%20-%20Ebook-analyse/FLINT%202022-011%20-%20Banana%20Sulfate%20infrastructure%20exposed_WHITE.pdf

analytics-ntp.com
app-requests.com
asset-updater.com
banana-sulfate.org
biturl.li
budurl.li
build-search.com
build-symcd.com
cdnnode-smsg.com
check-sync.com
checksum-ctrl.com
checksum-cts.com
checksum-mz.com
checksum-ota.com
cloud-ntp.com
control-mtp.com
control-updt.com
ctrl-respond.com
cts-socket.com
cts-updt.com
cutl.gd
data-mtp.com
diag-cts.com
diagnostic-dev.com
diagnostic-link.com
east-ssl-endpoint.com
emui-build.com
forward-cts.com
forward-provider.com
geomap-apple.com
global-pkg.com
global-provider.com
link-ota.com
lturl.me
metrics-dev.com
mtp-socket.com
mtp-sources.com
mz-provider.com
mz-updt.com
node-sec.com
node-smsg.com
nserver7-apple.com
ntp-checksum.com
ntp-cts.com
ntp-layers.com
ntp-node.com
ntp-services.com
ntp-verify.com
online-repo.com
ota-build.com
ota-relay.com
ota-ssl.com
package-ssl.com
pkg-updater.com
provider-ota.com
relay-analytics.com
relay-apt.com
repo-sec.com
repo-ssl.com
request-package.com
respond-layer.com
respond-layers.com
respond-source.com
respond-updt.com
routing-layers.com
send-update.com
serv-build.com
smsg-updater.com
smtp-ressources.com
snip.gd
socket-metrics.com
soft-asset.com
soft-itunes-ota.com
source-app02.com
ssl-forward.com
symcd-itunes.com
sync-analytics.com
synchro-ntp.com
synchro-updt.com
t2m.gd
t2m.ink
tinurl.ink
tools-cts.com
trace-ota.com
update-ntp.com
updated-cloud.com
updater-check.com
urlme.li