# Copyright (c) 2014-2019 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: chanitor, hancitor

# Reference: https://www.threatcrowd.org/listMalware.php?page=0&antivirus=Trojan:Win32/Chanitor

o3qz25zwu4or5mak.onion
o3qz25zwu4or5mak.tor2web.org
o3qz25zwu4or5mak.tor2web.ru
svcz25e3m4mwlauz.onion
svcz25e3m4mwlauz.tor2web.org
svcz25e3m4mwlauz.tor2web.ru
um6fsdil5ecma5kf.onion
um6fsdil5ecma5kf.tor2web.org
um6fsdil5ecma5kf.tor2web.ru

# Reference: https://twitter.com/James_inthe_box/status/1044957343568388097
# Reference: https://pastebin.com/st49wnwB

onthethatsed.ru/4/forum.php
tontheckcatan.ru/4/forum.php

# Reference: https://pastebin.com/bPV4gVVL

heundthetrec.ru/4/forum.php
perranrowsin.com/4/forum.php
utteronhim.ru/4/forum.php

# Reference: https://pastebin.com/CQGHUK03

caperlighleft.com/4/forum.php
hescatofme.ru/4/forum.php
ledeventutru.ru/4/forum.php

# Reference: https://twitter.com/James_inthe_box/status/1047490196319612928

milliondollarlawsuit.co

# Reference: https://twitter.com/malware_traffic/status/1113586907655680001

/4/forum.php

# Reference: https://twitter.com/Antelox/status/914949407442862080

/ls5/forum.php

# Reference: https://twitter.com/BroadAnalysis/status/880488094277009408

/bdl/gate.php

# Reference: https://twitter.com/BroadAnalysis/status/783725374161186816

/ls6/gate.php

# Reference: https://twitter.com/BroadAnalysis/status/753688954323529729

/sl/gate.php

# Reference: https://twitter.com/mesa_matt/status/1113866153108148224
# Reference: https://ghostbin.com/paste/27b9a/raw

alldogspoop.co
alldogspoop.org
alldogspoop.biz
alldogspoop.info
alldogspoop.mobi
alldogspoop.net
cherryhillpooperscoopers.com
pooperscooperfranchise.com
shopalldogspoop.com