# Copyright (c) 2014-2026 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: ref8685, shelbyc2, shelbyloader

# Reference: https://x.com/elasticseclabs/status/1905247432486629712
# Reference: https://www.elastic.co/security-labs/the-shelby-strategy
# Reference: https://app.validin.com/detail?type=ip&find=172.86.68.55#tab=resolutions
# Reference: https://app.validin.com/detail?type=ip&find=195.16.74.138#tab=resolutions
# Reference: https://app.validin.com/detail?type=ip&find=2.56.126.151#tab=resolutions
# Reference: https://app.validin.com/detail?type=ip&find=2.56.126.157#tab=resolutions
# Reference: https://app.validin.com/detail?type=ip&find=2.56.126.188#tab=resolutions
# Reference: https://www.virustotal.com/gui/file/0354862d83a61c8e69adc3e65f6e5c921523eff829ef1b169e4f0f143b04091f/detection
# Reference: https://www.virustotal.com/gui/file/fb8d4c24bcfd853edb15c5c4096723b239f03255f17cec42f2d881f5f31b6025/detection

arthurshelby.click
newroztelecom.digital
shj-connect.online
sharjahairport.cloud
sharjahairport.pro
speed-test.click
wraith.network
fr1.wraith.network
ns1.speed-test.click
ns2.arthurshelby.click
ns1.newroztelecom.digital
ns2.newroztelecom.digital
ns2.speed-test.click
portal.sharjahairport.cloud

# Generic

/arturshellby
/johnshelllby
/repos/johnshelllby/
/repos/johnshelllby/myGit/
/repos/johnshelllby/myGit/contents/
/repos/johnshelllby/myGit/contents/f07bd31a6b9e/
/repos/johnshelllby/myGit/contents/Broadcast.txt
/repos/johnshelllby/myGit/contents/f07bd31a6b9e/Broadcast.txt
/repos/johnshelllby/myGit/contents/f07bd31a6b9e/Command.txt
/repos/johnshelllby/myGit/contents/f07bd31a6b9e/Vivante.txt
