# Copyright (c) 2014-2026 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: fakewallet

# Reference: https://twitter.com/BushidoToken/status/1522517912933867521

connectionprotect.com

# Reference: https://twitter.com/BushidoToken/status/1522700445864673282

vpn-upgrade.com
mobngft.com
d6sxp.app.link

# Reference: https://twitter.com/BushidoToken/status/1522701727308390402

upzerons.com

# Reference: https://twitter.com/malwrhunterteam/status/1524826748738752516
# Reference: https://www.virustotal.com/gui/file/22fcefcbfb303ed8e5d43b78dd318852174f0317acfef49ae70f7379a402fca3/detection

pixelmon.pw

# Reference: https://twitter.com/idclickthat/status/1562085563951464450
# Reference: https://twitter.com/idclickthat/status/1562099192243396609
# Reference: https://tria.ge/220823-rlh51agcd7/behavioral2
# Reference: https://tria.ge/220823-srbtjshab2/behavioral3

cbrexochai.com
ledgerwallet.support
linkedopports.com
livedevicestart.com

# Reference: https://twitter.com/malwrhunterteam/status/1748674527779848432
# Reference: https://www.virustotal.com/gui/file/767222b70007e761a1319da55d91c4a72796ef3a65e1725f79b610b46b19e378/detection
# Reference: https://www.virustotal.com/gui/file/1e2e4285c41036ebc8a704768c30ed2703e03a244b31d57f786814ca368cb1b2/detection

apple-analyser.com
apple-health.org

# Reference: https://x.com/L0Psec/status/2039403945143988660
# Reference: https://www.virustotal.com/gui/file/ede7f3ece611ba6c1ac4a02cf6a618b4ebd7eec6d9426b2baab3b5e26246e275/detection

193.30.121.37:30021

# Reference: https://securelist.ru/fakewallet-cryptostealer-ios-app-store/115241/

139.180.139.209:443
6688cf.jhxrpbgq.com
api.dc1637.xyz
api.npoint.io/153b165a59f8f7d7b097
apps-store.im
appstoreios.com
crypto-stroe.cc
dc1637.xyz
gxzhrc.cn
helllo2025.com
iosfc.com
kkkhhhnnn.com
mgi1y.siyangoil.com
mti4ywy4.lahuafa.com
mtjln.siyangoil.com
mziyytm5ytk.ahroar.com
ngy2yjq0otlj.ahroar.com
nmu8n.com
ntm0mdkzymy3n.oukwww.com
nziwytu5n.lahuafa.com
odm0.siyangoil.com
okfackyourmm.icu
sxsfcc.com
xz.apps-store.im
yjzhengruol.com
zdrhnmjjndu.ulbcl.com
zmx6f.com
