# Copyright (c) 2014-2026 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: phantompull, REF6598

# Reference: https://x.com/elasticseclabs/status/2043738795057521004
# Reference: https://x.com/bluish_red_/status/2044065910357467587
# Reference: https://www.elastic.co/security-labs/phantom-in-the-vault?utm_source=organic-social
# Reference: https://www.virustotal.com/gui/file/def66275fa3baffb16e6e4ae0297861d9790ae7161fbc271a2ba05d121f13c70/detection

http://195.3.222.251
0x666.info
fefea22134.net
gfsdjjg33jfk.com
phantomgate.net
panel.fefea22134.net
thoroughly-publisher-troy-clara.trycloudflare.com

# Generic

/v1/updates/check?build=payloads
/updates/check?build=payloads
