# Copyright (c) 2014-2020 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://securelist.com/analysis/publications/69567/the-chronicles-of-the-hellsing-apt-the-empire-strikes-back/

freebsd.extrimtur.com
articles.whynotad.com
guaranteed9.strangled.net
hosts.mysaol.com
web01.crabdance.com
imgs09.homenet.org
second.photo-frame.com

# Reference: https://securelist.com/the-naikon-apt/69953/
# Reference: https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2018/03/07205555/TheNaikonAPT-MsnMM1.pdf

ahzx.eicp.net
bkav.imshop.in
googlemm.vicp.net
mncgn.51vip.biz
myanmartech.vicp.net
thailand.vicp.net
ubaoyouxiang.gicp.net
vietnam.gnway.net

# Reference: https://research.checkpoint.com/2020/naikon-apt-cyber-espionage-reloaded/

ajtkgygth.com
bbs.forcejoyt.com
blog.toptogear.com
cpc.mashresearchb.com
dathktdga.com
dns.jmrmfitym.com
dns.seekvibega.com
kyawtun119.com
kyemtyjah.com
mon-enews.com
n91t78dxr3.com
news.nyhedmgtxck.com
qisxnikm.com
rad.geewkmy.com
realteks.gjdredj.com
rrgwmmwgk.com
spool.jtjewifyn.com
sugano.trictalmk.com
wdrfjkg129.com
