# Copyright (c) 2014-2026 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: worldwindstealer

# Reference: https://twitter.com/James_inthe_box/status/1674105216575373312
# Reference: https://app.any.run/tasks/ab8f29a9-cf74-4f63-b296-dced2e5a2393/

tiny23.duckdns.org

# Reference: https://x.com/PrakkiSathwik/status/1917839783260479928
# Reference: https://www.virustotal.com/gui/file/04e57b06d3c6cdd3fe3f1eafcbd2ae2f29af74176fcd618f1f3c6524047bce25/detection

45.88.76.100:7816
45.91.201.178:7816
91.211.249.142:7816
91.211.250.21:7816

# Reference: https://x.com/D3LabIT/status/1927353401135837187
# Reference: https://www.virustotal.com/gui/file/cd57258684931fbbaeb60413939120b7ec08b81929a9eb662fb1446471700103/detection

el-euphrates.com
mail.el-euphrates.com

# Reference: https://x.com/JAMESWT_WT/status/1933196226557800887
# Reference: https://www.virustotal.com/gui/file/9aced12419748bb2ed7df74b0d80abdf2b4555715fad99ee1ec9f3d2ec8699aa/detection
# Reference: https://www.virustotal.com/gui/file/486d416789d233f798bb69dc3001be232d28efe6dcaa9bda27c96dd46249551d/detection
# Reference: https://www.virustotal.com/gui/file/2d508fcf0effac80413197e4f2921d67226d517b214ed6fae9a92c0edbcaa33c/detection
# Reference: https://www.virustotal.com/gui/file/b78b9b7a6969d771e6992a81e56eea6269c2f0fb554c79edc7cc1762094bf183/detection

http://130.250.191.35
http://144.172.116.121
130.250.191.35:1771
130.250.191.35:6565
as58.duckdns.org
may2425.duckdns.org

# Reference: https://x.com/SpiderLabs/status/1995639456028926169
# Reference: https://www.virustotal.com/gui/file/5902d14e0685e8e779e5861a57f67273d836659f9a3c329c781faa9c3581c435/detection
# Reference: https://www.virustotal.com/gui/file/b4d07dcda9293fcddf484d5dd2bae0f8ffc537973525220f566dc175403efe05/detection
# Reference: https://www.virustotal.com/gui/file/e76061629775ac98d4837efcb985df271d37d441463203f0792ffe4670d4f4b9/detection

31.57.147.77:6464

# Reference: https://x.com/Fact_Finder03/status/2021548591710695933
# TITLE-HOST/IP=Stealerium C2 Panel

techversehub.xyz
mail.techversehub.xyz

# Generic

/api/bot/v1/register
