# Copyright (c) 2014-2020 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://twitter.com/sh1shk0va/status/1186968376930897926 (# Ginp)
# Reference: https://twitter.com/PRODAFT/status/1187620160401793024

http://64.44.133.36
carnivors284.info

# Reference: https://www.threatfabric.com/blogs/ginp_a_malware_patchwork_borrowing_from_anubis.html
# Reference: https://www.virustotal.com/gui/file/0ee075219a2dfde018f17561467272633821d19420c08cba14322cc3b93bb5d5/detection

http://64.44.51.107

# Reference: https://twitter.com/Bank_Security/status/1252524936876490754
# Reference: https://otx.alienvault.com/pulse/5e9df6e58b881d548e838801

http://8.208.27.214
change923.ru
coronafinder.rest
covidfinder.uno
criticchaireducate.top
mysteryquickchunkstreet.top
nightpieceenergy.top
onlyscaredivideriot.top
recallquestionactscare.top
riotlogicaware.top
unfairpriority.top

# Reference: https://twitter.com/LukasStefanko/status/1257709568378974208

canvasfuture.top
diarysuitepause.com
illegalvaguecomic.top

# Reference: https://twitter.com/ESETresearch/status/1273980366911614977

volcanohentiny.top
