# Copyright (c) 2014-2026 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: noodlophilevn, noodlophile stealer, kiemdev05, luci205, unc6032

# Reference: https://x.com/DaveLikesMalwre/status/1908406736014258280
# Reference: https://app.validin.com/detail?type=raw&find=CapCut+%7C+All-in-one+video+editor+%26amp%3B+graphic+design+tool+driven+by+AI#tab=host_pairs (# 2025-04-05)

app-zoom-meeting.top
background-remover.store
capcut-ai.com
capcut-download.pro
capcut-trials.net
capcut-videoedit.top
capcut.gameszonehub.workers.dev
capcut.lt
capcutapp.ltd
capcuteditor.online
capcuteditor.org
capcuti.com
capcutproai.com
capcutproforpc.com
capcuts.top
capcuts.xyz
capcutvideo.com
capkut.store
decktop.top
devdeponta.com
economistwhite0118.online
editingcapcut.com
klm.wri.temporary.site
luma-dreammachine.com
lumadown.top
lumadownss.com
lumadreamlabs-ai.com
lumadreammachines-ai.com
mail.capcut-trials.net
mail.capcutproai.com
mail.klm.wri.temporary.site
plissensineklik.com
prysmicxyd.com
rufus-usb.digital
videoeditstudio.store
web-capcut-us.top

# Reference: https://x.com/rst_cloud/status/1921735230609661984
# Reference: https://www.morphisec.com/blog/new-noodlophile-stealer-fake-ai-video-generation-platforms/

dreamai-luma.com
imgtovideoai.com
invideo-ai.com
luma-ai.com
luma-ai.ru
luma-ai.xyz
luma-dream.com
luma-dreamai.com
luma-labsai.com
luma-labsdream.com
lumaai-dream.com
lumaai-lab.com
lumaailabs.com
lumadream-ai.com
lumadreamai.com
lumai-dream.com
lumai-dreammachine.com
lumalabs-dreammachine.com
lumalabsai.in

# Reference: https://x.com/blackorbird/status/1927989991226986916
# Reference: https://cloud.google.com/blog/topics/threat-intelligence/cybercriminals-weaponize-fake-ai-websites

adobe-express.com
ai-kling.com
aikling.ai
aisoraplus.com
boostcreatives-ai.com
boostcreatives.ai
canva-dreamlab.com
canvadream-lab.com
canvadreamlab.ai
canvadreamlab.com
canvaproai.com
creativepro-ai.com
creativepro.ai
creativespro-ai.com
klings-ai.com
klingxai.com
luma-aidream.com
lumaai-labs.com
lumaaidream.com
quirkquestai.com

# Reference: https://app.validin.com/detail?find=576e18d93eba2f85fbe6fc35bbfa370e&type=hash&ref_id=f65a0777a46#tab=host_pairs (# 2025-05-30)

ai-klingworld.com
app--klingai.com
app-kling-ai.com
app-klingai.com
app-klingver2.com
app-klingwolrd.com
app-klingwolrdai.com
appkling.com
appklingai.com
appklingpro.com
kling-global.com
kling.seobdtools.com
klingai-app.com
klingai-global.com
klingai-world.com
klingaipro.com
klingwolrd-appsv2.com
klingwolrd-appv2.com
klingworld-ai.com
pagebusiness-support-home.com
saitamanmeo.xyz
sklingai.com
storyshort-app.com
storyshorts-ai.com

# Reference: https://x.com/Dixit_404/status/1950494324594282960

comlumaai-lab.com
lumaailabs.comlumaai-lab.com
pagebusiness-support-humadreamai.com

# Reference: https://x.com/JaromirHorejsi/status/1950575050005839977
# Reference: https://research.checkpoint.com/2025/impersonated-kling-ai-site-installs-malware/

kingaimediapro.com
kingaiplus.com
kingaitext.com
kingaivideotext.com
kling-ai.tech
klingai.cloud
klingaieditor.com
klingaimedia.com
klingaistudio.com
klingx.ai

# Reference: https://www.morphisec.com/blog/noodlophile-stealer-evolves-targeted-copyright-phishing-hits-enterprises-with-social-media-footprints/

http://15.235.172.219
http://196.251.84.144

# Reference: https://www.virustotal.com/gui/file/90ae687f6747193f006928c9fd966a7ee473609bae386b6228ca62313a000f7e/detection

47.237.15.197:21
