# Copyright (c) 2014-2026 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://www.welivesecurity.com/en/eset-research/promptspy-ushers-in-era-android-threats-using-genai/
# Reference: https://github.com/eset/malware-ioc/tree/master/promptspy
# Reference: https://www.virustotal.com/gui/file/11f5c91d24c9d1eee16dacacfb9160e299544c1a854af92f79daf88364cea0b6/detection
# FAVICON_HASH-HOST=1a7044ceda69381942b48eb1908119af

54.67.2.84:5500
54.67.2.84:8080
9iu74a51.com
a-chase-ar.com
a-chase-arg.com
anonovo7.com
cgju832a.com
dt-mg-ar.com
fondos-mg-p.com
m-mgarg.com
mg-ar-a.com
mg-arg-a.com
mg-dt-fondo.com
mg-fondo-mli.com
mg-fondo-uno.com
mgardownload.com
mil-arg.com
h5.9iu74a51.com
h5.a-chase-ar.com
h5.a-chase-arg.com
h5.dt-mg-ar.com
h5.fondos-mg-p.com
h5.m-mgarg.com
h5.mg-ar-a.com
h5.mg-arg-a.com
h5.mg-dt-fondo.com
h5.mg-fondo-mli.com
h5.mg-fondo-uno.com
h5.mil-arg.com
test123.anonovo7.com
test123.cgju832a.com
test123456.cgju832a.com
