#!/usr/bin/env python

"""
Copyright (c) 2014-2026 Maltrail developers (https://github.com/stamparm/maltrail/)
See the file 'LICENSE' for copying permission
"""

import re

from core.common import fetch_headers
from core.common import retrieve_content

__url__ = "https://cybercrime-tracker.net/ccpmgate.php"
__check__ = "/gate.php"
__info__ = "fareit (malware)"
__reference__ = "cybercrime-tracker.net"

def fetch():
    retval = {}
    headers = fetch_headers(__url__)

    location = headers.get("Location", "")
    match = re.search(r"\?(__r=[\w.]+)", location)
    if match:
        content = retrieve_content(__url__, headers={"Cookie": match.group(1)})

        if __check__ in content:
            for line in content.split('\n'):
                line = line.strip()
                if not line or line.startswith('#'):
                    continue
                if '://' in line:
                    line = re.search(r"://(.*)", line).group(1)
                retval[line] = (__info__, __reference__)

    return retval
