# Copyright (c) 2014-2026 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://x.com/L0Psec/status/1982917091956236737
# Reference: https://www.virustotal.com/gui/file/7a8fc48ce4df4448b91a1e6b66410cca6993ac072cb12860b9cfa6438b25ed8e/detection
# BANNER_0_HASH-HOST=17e0bfe16e1aa41f9f86ae88f7e09bb8

ad4rchr39w8f.fun
ad4rchr39w8f.store
nfs8u9aw.shop
pla7ina.cfd
/phefuckxia
/phefuckxiabot

# Reference: https://x.com/moonlock_lab/status/1991619357441434057
# Reference: https://x.com/moonlock_lab/status/1991621172044394755
# Reference: https://www.virustotal.com/gui/file/2cbdfab09e85f78c6764742672604d689bb98476e8ed8369f14b6bad4dbc3c3b/detection

apple-service.bet
stickvpn.com

# Reference: https://x.com/L0Psec/status/1995529867044278691
# Reference: https://www.virustotal.com/gui/file/049f9a7db7016a0054e37a1ca2079548ee7b34380f55c077dadf5c6e2a555d59/detection

ocarrasco.com

# Reference: https://x.com/L0Psec/status/2002103795279675647
# Reference: https://github.com/hagezi/dns-blocklists/issues/9203#issuecomment-3940201642
# Reference: https://www.virustotal.com/gui/file/b7d0c650fc019023ada5217b7163cd25faf3d800d439a0daad2e4a1ec046935b/detection

kys.com.br
kys.cx
kys.li
kys.mom
kys.rip
kys.wiki
kys.works

# Reference: https://x.com/g0njxa/status/2023409834905743661
# Reference: https://www.virustotal.com/gui/file/5415c2b23fc68d29b70bf9928a1bccb780535f01dba0a0879687edf3eb71ac6c/detection
# Reference: https://www.virustotal.com/gui/file/5f825d270c7a9697c2822605efcb01713a874cfacd5b0613d5eb6dfdda29abeb/detection

http://138.124.18.9
