# Copyright (c) 2014-2026 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: spark stealer, hade stealer

# Reference: https://any.run/cybersecurity-blog/microstealer-technical-analysis/
# Reference: https://blog.gdatasoftware.com/2026/03/38390-minecraft-mod-sugarsmp-malware
# Reference: https://app.any.run/tasks/d59c90ed-820e-4f3d-be47-77bd997835aa/
# CLASS_0_HASH-HOST=2ca19cab6e433e61b3f73afb4941f275
# CLASS_0_HASH-HOST=3c9e5fcab8e42ae84f3274070c46d469
# CLASS_0_HASH-HOST=57c991783f8f65024dcf6be893cf5d9b
# CLASS_0_HASH-HOST=662e0a052c902a00bca14b45a3a5da87
# CLASS_0_HASH-HOST=be06fa3d6cbd8ee59e64dd554f00f14d
# CLASS_0_HASH-HOST=c3e69af5566232c7e00b4f634bff2660
# CLASS_0_HASH-HOST=20074790b3fa37868825800b19a42548
# FAVICON_HASH-HOST=2413e4e70e1362a1b00e627e76bed5bb
# FAVICON_HASH-HOST=786456c2e5d6c90e7aa8fbe083687dd6
# FAVICON_HASH-HOST=fbc4dff27cbb5f4e036d27e6db0c85d6
# META-HOST=:::"description":"Join thousands of players in a pink-white, zero-toxicity Hello Kitty SMP experience. Features a balanced economy, weekly events, protected plots, and the coziest community ever!"

45.145.42.77.sslip.io
78smp.com.tr
aetherbound.pages.dev
allah-1bd.pages.dev
allahaa.pages.dev
allahq.pages.dev
alp-6i4.pages.dev
api.veyware.com
api2.dearlyme.site
arcaneharbor.com
arcaneheaven.pages.dev
ashenarcane.pages.dev
astralheaven.pages.dev
athena.bingo
atirush.pages.dev
averenth.pages.dev
averilune.com
ayan-bqh.pages.dev
bantermods.com
banterplugin.pages.dev
banterplugins.com
banterplugins.pages.dev
banterpluginsss.pages.dev
bantervr.pages.dev
bantervrplugins.pages.dev
beta-averenth.pages.dev
betahuedini.pages.dev
blockyracer.com
blockyrush.com
blockyrush3.pages.dev
blockyrush33.pages.dev
blockyrush4455hh.pages.dev
blockyrush4456.pages.dev
blockyrushcf44.pages.dev
blockyrushcf44hh.pages.dev
bunnycraft.online
buradabmwking.com
buradakimvar.com
burnraid.com
ceaxfull.pages.dev
celarith.pages.dev
chalicevr.com
cherriecraft.com
chilloutvrplugin.com
churilend.com
collectohub.com
conconcraft.net
crushfall.com
cursedfall.com
cutecraft.store
cuteslump.com
cuteslump.online
cutiecraft.co
cutiecraft.com
cutiecraft.net
cutiecraft.network
cutiecraft.org
cutiecraft.world
cutiemc.com
cutiemc.fun
cutiemc.online
cutieroblox.site
cutiesmc.com
cutiesmp.net
cutlesmc.pages.dev
cuttie.pages.dev
cuttiescraft.com
cuttieslauncher.com
cuttiesmp.com
cutycraft.fr
cutycraft.pages.dev
cxfcsda.pages.dev
damnedblocky.com
danith.pages.dev
dashlune.xyz
dearlyme.site
delarith.pages.dev
demrush.pages.dev
dev.collectohub.com
draventh.com
draventh.pages.dev
dreedush.pages.dev
drexon.pages.dev
dsblockyrush.pages.dev
dunith.pages.dev
eclipsewarden.com
eclipsewarden.pages.dev
ekorush.pages.dev
ekorushbeta.com
ekorushbeta.pages.dev
eldrynworld.com
eloryth.com
elthira.pages.dev
elvarioth.com
elyriacraft.com
elyrion.pages.dev
elyrione.pages.dev
enemyrush.com
enemyrushnew.pages.dev
epicdepths.com
erkanoctur.pages.dev
erkanoctur5.pages.dev
erkanoctur53.pages.dev
eryndor.pages.dev
fableshard.pages.dev
fearfall.com
feridogames.com
gokalp-sk2.pages.dev
greatsmp.com
grimraid.com
hellocraft.online
hellokittycraft.com
hellokittycraft.net
hellokittymc.com
hellokittymc.online
hellokittymods.site
hellokittysmc.com
hellopink.net
hellycraft.com
hero-run.com
hero-run.pages.dev
hoyavor.com
hread.pages.dev
kamusozluk.com
kitllycraft.net
kitlycraft.net
kitseramc.com
kitten-smp.com
kittencilent.com
kittenclient.com
kittencraft.org
kittencraftmc.com
kittenmc.com
kittenscraft.com
kittenscrafts.com
kittensmc.com
kittensmp.site
kittiecraft.com
kittiecraft.net
kittiecraftmc.com
kittiecrafts.com
kittiemc.com
kittiemc.net
kittiemc.online
kittien-smp.com
kittienmc.com
kittiensmc.com
kittiescraft.com
kittiescraft.net
kittiescrafts.com
kittiescraftt.com
kittieslandmc.com
kittiesmc.com
kittiesmc.net
kittiysmc.com
kittlycraft.com
kittlycraft.fun
kittlycraft.net
kittlyworld.com
kittycraft.com
kittycraft.fun
kittycraft.online
kittycraft.site
kittycraft.world
kittycraftmc.com
kittycraftmc.pages.dev
kittycrafts.net
kittyescraft.com
kittyhubmc.com
kittypinkiecraft.com
kittypixel.com
kittyscrafts.com
kittysmp.net
kittysmp.world
klozerus.com
kuromicraft.online
lanchemc.com
legendshadows.com
legendshadows.pages.dev
leynara.com
loot-rush.com
lootrush.pages.dev
lotera.pages.dev
lovelymc.com
lovera.pages.dev
loxira.pages.dev
lunexia.pages.dev
lunexiabeta.pages.dev
lunnycraft.lol
mail.hellokittycraft.net
mail.hellopink.net
mail.kittienmc.com
mail.kittysmp.world
mail.sweetiecraft.net
malersel.pages.dev
malgorkem.pages.dev
malyonar.com
miavna.pages.dev
micro-8ib.pages.dev
minicraft.world
modsbanter.com
moonveil.pages.dev
mystara.pages.dev
mysticpeonymod.site
mysticraft.fun
mysticraftsmp.fun
neekocraft.com
nekoocraft-6s4.pages.dev
nekoocraft.com
nekoocraft.pages.dev
nightsthread.com
noctar.pages.dev
owocraft.com
owocraft.pages.dev
oy.tahakeles.com.tr
pinkcraftmc.com
pinkiecraft.com
pinkiesmp.com
pinkycraft-7pa.pages.dev
pixelmario.com
pixelrampage.net
playdamnedblocky.com
playpinkycraft.com
playsweetcraft.pages.dev
playsweetcraft.site
poligonvrplugin.pages.dev
ponyrise.com
pranveth.com
pranveth.pages.dev
purfall.com
purfall.games
purplesmp.com
purpurcraft.com
purrscraft.com
ragnacook.site
ravethor.com
ravethor.pages.dev
reaw.pages.dev
rehona.pages.dev
rocobe-beta.pages.dev
rocobe.pages.dev
runexia.pages.dev
rynora.pages.dev
sanriocraft.online
sanriomc.com
sanriomc.online
scarent.pages.dev
scarentt.pages.dev
selarith.com
selarith.pages.dev
sephione.pages.dev
sephiora.pages.dev
seylanos.com
seylaran.com
shadowcape.com
shadowslegends.pages.dev
site-4j4.pages.dev
slumpcute.com
softiecraft.com
soylamos.com
sparkfull.pages.dev
spectralhaven.com
spectralhaven.pages.dev
spectralhaven.xyz
spongecrafts.vip
sugarsmp.com
sweet-craft.com
sweetcraft.net
sweetcraft.site
sweetcraftsmpp.pages.dev
sweetiecraft.com
sweetiecraft.games
sweetiecraft.net
sweetkittycraft.com
sweetkittycraft.netlify.app
sworex.pages.dev
tegola.co.uk
telarith.pages.dev
tenebris.pages.dev
thenightsthread.com
thenightsthread.pages.dev
tokorun.com
tokorun.pages.dev
tokorush.com
tokorush333.pages.dev
tokorush3333.pages.dev
tokorush33335.pages.dev
tokorush3335.pages.dev
trafficmonetization.co.uk
uwucraft.net
vampiredarkage.pages.dev
velano.pages.dev
velarith.com
velarith.pages.dev
velazos.com
velroyth.com
velyanor.com
velyonar.com
velzarus.com
vexina.pages.dev
vonta.pages.dev
vontabeta.pages.dev
vrchatmmd.pages.dev
vrchatmod.net
vrchatmodnet.pages.dev
vrchatplugin.org
vrcmodz.com
vrcpluginhub.com
vrcpluginhub.pages.dev
website-6na.pages.dev
welarith.com
weldors.pages.dev
worldswars.net
yagiz.art
ysf-29n.pages.dev
yusuf-67s.pages.dev
zarvethion.com
zarvethion.pages.dev
zarvethis.com
zarvethis.pages.dev
zelyanor.com
zephiona.pages.dev
zigotersel.pages.dev

# Reference: https://x.com/solostalking/status/2024524291925299615
# Reference: https://www.virustotal.com/gui/file/5122c435b4930cb7c9bcbac6c8b01c1c4c4ea613c3a2d236010d07d79b22f76b/detection

213.142.135.175:3000
213.142.135.203:3000

# Reference: https://x.com/struppigel/status/2034123131841909031
# Reference: https://www.virustotal.com/gui/file/b4e05e046c26f776f1490b8dd040851c2ef9d5b9144af6cacba7ebf61ff8e247/detection
# FAVICON_HASH-HOST=8abbae56adae8f98f17c37e400a4afd0
# META-HOST=::"og:image"::"images/Heylanos.png?v=1"
# META-HOST=::"og:site_name"::"by Sukuna Studios"

eminoris.com
halevar.com
hamidonis.com
hayavor.com
hoyovar.com
hoyovor.com
hugavor.com
hugovar.com
huyovar.com
loyamor.com
molyanor.com
osminor.com
soylanar.com
valyonar.com
volimor.com
yolimor.com
yusumonis.com
zoyanor.com
