# Copyright (c) 2014-2020 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: asurahttp, litehttp

# Reference: https://viriback.com/recent-litehttp-activities-and-iocs/

http://103.194.170.51
http://172.81.133.27
http://176.223.131.228
http://62.77.155.65
babycute.thats.im
bananaloop.ru
k9stock.com
partnerwithuss.ru
posalive.su
razilov06.hldns.ru
sketchie.ru
tik-media.info
topksa.net
x420.me
xanull.phy.sx
yylisah0.beget.tech

# Reference: https://twitter.com/ViriBack/status/983011333506588672
# Reference: https://pastebin.com/nwWHHFe0

posalive.su

# Reference: https://twitter.com/ViriBack/status/1046928533375856640

areablankserver.tk

# Reference: https://twitter.com/malwrhunterteam/status/1114510622610403328

litehttp.altervista.org

# Reference: http://tracker.viriback.com/dump.php (# 2020-02-23, LiteHTTP)

aflamdirectory.com/wp-content/ip/login/
temp-malware.website
