# Copyright (c) 2014-2026 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://web.archive.org/web/20120106212034/http://amada.abuse.ch/blocklist.php?download=domainblocklist

01n02n4cx00.com
0o0o0o0o0.com
19js810300z.com
1efmdfieha-mff.com
1iii1i11i1ii.com
1zabslwvn538n4i5tcjl.com
4tag16ag100.com
5berty3uertb.com
68b6b6b6.com
86b6b96b.com
873hgf7xx60.com
aasmartmoney.com
adgorge.com
aebrook.com
baboeing.com
bdcoast.com
befiest.com
brainbox.dyndns.org
ch01cilewk.com
cl0wn-world.com
cloudnanoconnnection.info
cosmicupdate.com
cr0wd-wal1.com
cybersearch-0.com
dujdinganx.in
elsmarketplus.org
glhkghjfhhfklffr.com
i0m71gmak01.com
jro1ni1l1.com
kangojim1.com
klz1mqnspdkod-bq.com
l04undreyk.com
li1i16b0.com
lifereward-l0tery.com
lit0graphy-type.com
lj1i16b0.com
lkaturl71.com
lo4undreyk.com
mdmonit.com
nichtadden.in
nl6fa53.com
ourmultstoryonline.com
qrtyp0ngt0st.com
rukkeianno.com
send2000.com
term0l5ter12.com
termoi5terl2.com
treet-0rthret.com
winupdateserver.su
share-finder.com
zonedg.com
zz87lhfda88.com

# Reference: https://securelist.com/tdss/36314/

91.212.226.62:443
91.212.226.65:443
91.212.226.66:443
91.212.226.67:443
01n02n4cx00.cc
19js810300z.com
b00882244.cn
b11335599.cn
d45648675.cn
d92378523.cn
li1i16b0.com
lj1i16b0.com
m3131313.cn
n16fa53.com
nichtadden.in
z0g7ya1i0.com
zz87jhfda88.com

# Reference: https://www.virustotal.com/gui/ip-address/95.143.193.138/relations
# Reference: https://www.virustotal.com/gui/file/f1ad988df850588c27f5f6977106a1f0f03b9340c106a314e31131fbbe5265be/detection

http://95.143.193.138

# Reference: https://www.virustotal.com/gui/file/ca52c0cdee4797716b4e702fda8dd7c73a552c23d34be6926279a405ad48c000/detection

01n02n4cx00.cc
01n02n4cx00.com
01n20n4cx00.com
10n02n4cx00.com
1l1i16b0.com
lj1i16b0.com
n16fa53.com
nichtadden.in
xx87lhfda88.com
z0g7ya1i0.com
z0g7yalil0.com
zz87ihfda88.com
zz87jhfda88.com
zz87lhfda88.com

# Reference: https://www.virustotal.com/gui/file/e9c1bcfd76b5aadbc2155b961a665e9d5d2afb7424e6acf60e07fdb2ec441131/detection

1il1il1il.com
34jh7alm94.asia
69b69b6b96b.com
cap01tchaa.com
countri1l.com
ikaturi11.com
kur1k0nona.com
lkckclckl1i1i.com
lkckclcklii1i.com
nyewrika.in
rukkieanno.in
sh01cilewk.com
u101mnay2k.com

# Reference: https://www.virustotal.com/gui/file/b02d6cf98ddaf81bda05cabe9456cfc39d0dd1bfb1bbf782a8097fc38fa4c4c4/detection

33ff99.com
ff00cc.com

# Reference: http://www.microsoft.com/security/portal/threat/encyclopedia/entry.aspx?Name=Trojan:Win32/Alureon.gen!U#tab=2

belowsearch.com
directitfast.com
explorerex.com
faststatistic.com
findsproportal.com
findzproportal1.com
microsofttransfer.com
newsoneclick.com
perlineportal.com
powerfulstat.com
shouldfind.com
simplybloger.com
stableclick.com
symupdate2.com
tlcstatistic.com
trafficstatic.com
trafficstatic.net
tylerdurden.hoha.ru
updatemic0.com
updatemicr0s0ft.net
webadobeupdate.net
webieupdate.net
webmsupdate.net
webnicrisoft.net
windowslogonex.com
youblognews.net
younewsblog.net
yourblognews.net
yournewsblog.net

# Generic

/data/www/dm_engine/library/classes/DBase.php
/data/www/dm_engine/public/enginestatusn.php
/data/www/dm_engine/library/models/mSystems.php
/data/www/dm_engine/public/index.php
/xxxx_2/
/wekdmxx.php?ini=
