# Copyright (c) 2014-2020 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://medium.com/csis-techblog/analysis-of-joker-a-spy-premium-subscription-bot-on-googleplay-9ad24f044451

joker2.dolphinsclean.com
beatleslover.com
tb-eu-jet.oss-eu-central-1.aliyuncs.com

# Reference: https://twitter.com/sh1shk0va/status/1184054662003134464
# Reference: https://www.virustotal.com/gui/ip-address/52.77.93.217/relations

23w5338-z.com
beatleslover.com
hyy-2d2.com
kaaryah.com
nichfyy.com
prick-6ey.com
sw7p5-629.com

# Reference: https://twitter.com/ReBensk/status/1217065291320045568

andu-eu.oss-eu-central-1.aliyuncs.com

# Reference: https://research.checkpoint.com/2020/android-app-fraud-haken-clicker-and-joker-premium-dialer/
# Reference: https://www.virustotal.com/gui/ip-address/3.123.204.12/relations

http://3.123.204.12

# Reference: https://twitter.com/ReBensk/status/1232297093802233856

happyyear.top

# Reference: https://twitter.com/ReBensk/status/1246451065970712576

wsbb.oss-eu-central-1.aliyuncs.com

# Reference: https://twitter.com/sh1shk0va/status/1249765927677243393

gplay.oss-eu-west-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1274316961510498306

yehua-online.oss-cn-hangzhou.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1274334502224044032

facebookdata-1301476296.cos.na-ashburn.myqcloud.com

# Reference: https://twitter.com/ReBensk/status/1275443534070296576

wdfoz.oss-eu-central-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1275713835090001922

rockmanpc.oss-us-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1276806753959763968

http://34.206.171.237
woea.oss-me-east-1.aliyuncs.com

# APK

/000166ssshH5.apk
