# Copyright (c) 2014-2026 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: http://citizenlab.org/2016/08/million-dollar-dissident-iphone-zero-day-nso-group-uae/

alljazeera.co
bbc-africa.com
cnn-africa.co
unonoticias.net
univision.click
track-your-fedex-package.org
mz-vodacom.info
iusacell-movil.com.mx
sabafon.info
newtarrifs.net
y0utube.com.mx
fb-accounts.com
googleplay-store.com
whatsapp-app.com
accounts.mx
adjust-local-settings.com
emiratesfoundation.net
topcontactco.com
icrcworld.com
redcrossworld.com
checkinonlinehere.com
turkishairines.info
bulbazaur.com
pickuchu.com

# Reference: https://www.proofpoint.com/us/daily-ruleset-update-summary-20160825

aalaan.tv
accounts.mx
alawaeltech.com
alljazeera.co
asrararabiya.co
asrararablya.com
asrarrarabiya.com
bahrainsms.co
bbc-africa.com
bulbazaur.com
checkinonlinehere.com
cnn-africa.co
damanhealth.online
emiratesfoundation.net
fb-accounts.com
googleplay-store.com
icloudcacher.com
icrcworld.com
manoraonline.net
mz-vodacom.info
newtarrifs.net
ooredoodeals.com
pickuchu.com
redcrossworld.com
sabafon.info
smser.net
sms.webadv.co
topcontactco.com
turkeynewsupdates.com
turkishairines.info
uaenews.online
univision.click
unonoticias.net
whatsapp-app.com
y0utube.com.mx

# Reference: https://citizenlab.ca/2018/09/hide-and-seek-tracking-nso-groups-pegasus-spyware-to-operations-in-45-countries/

14-tracking.com
akhbar-arabia.com
animal-politico.com
nomorewarnow.com
noticiaspoliticos.com
nouveau-president.com
politicalpress.org
politicoportales.org
politiques-infos.info
revolution-news.co
shia-voice.com
signpetition.co
social-life.info
un0noticias.com
un0noticias.net
universopolitico.net

# Reference: https://citizenlab.ca/2018/07/nso-spyware-targeting-amnesty-international/

adjust-local-settings.co
afternicweb.net
arabnews365.com
banca-movil.com
ecommerce-ads.org
kingdom-deals.com
nsoqa.com
pine-sales.com
qaintqa.com
remove-subscription.co
track-your-fedex-package.online

# Reference: https://citizenlab.ca/2017/08/nso-spyware-mexico-corruption/

smsmensaje.mx

# Reference: https://citizenlab.ca/2017/06/reckless-exploit-mexico-nso/

ideas-telcel.com.mx
mymensaje-sms.com
network190.com
secure-access10.mx
smscentro.com
twiitter.com.mx

# Reference: https://citizenlab.ca/2018/10/the-kingdom-came-to-canada-how-saudi-linked-digital-espionage-reached-canadian-soil/

all-sales.info
arabworld.biz
beststores4u.com
cheapapartmentsaroundme.com
daily-sport.news
dinneraroundyou.com
findmyplants.com
housesfurniture.com
kingdom-news.com
mideast-today.com
muslim-world.info
news-gazette.info
# nouvelles247.com
promosdereve.com
sunday-deals.com
wonderfulinsights.com

# Reference: https://citizenlab.ca/2018/11/mexican-journalists-investigating-cartels-targeted-nso-spyware-following-assassination-colleague/

banca-movil.net
savephotos.net

# Reference: https://twitter.com/VK_Intel/status/1017190191864434689

mp3.ucrazy.org/music/

# Reference: https://www.amnesty.org/en/latest/research/2018/08/amnesty-international-among-targets-of-nso-powered-campaign/

onlineshopzm.com
zednewszm.com
zm-banks.com
zm-weather.com
nothernkivu.com
afriquenouvelle.com
allafricaninfo.com
centrasia-news.com
mystulchik.com
odnoklass-profile.com
sputnik-news.info
tengrinews.co
sergek.info
egov-sergek.info
mykaspi.com
kaspi-payment.com
e-sveiciens.com
klientuserviss.com
kurjerserviss.com
reklamas.info
legyelvodas.com
theastafrican.com
ajelnews.net
akhbara-aalawsat.com
centrasia-news.com
tengrinews.co
akhbar-arabia.com
gulf-news.info
eltiempo-news.com
sputnik-news.info
arabnews365.com
arabworldnews.info
breaking-extranews.online
breaking-news.co
breakingnewsasia.com
breakthenews.net
daily-sport.news
diaspora-news.com
discoveredworld-news.com
eurosportnews.info
golf-news.live
investigationews.com
islamic-news-today.com
kingdom-news.com
leadersnews.org
news-alert.org
news-gazette.info
newscurrent.info
newsdirect.online
newsofficial.info
newsofthemoment.net
newworld-news.com
online-dailynews.com
only-news.net
operatingnews.com
posta.news
regionews.net
topten-news.info
zednewszm.com

# Reference: https://www.amnesty.org/en/latest/research/2019/10/morocco-human-rights-defenders-targeted-with-nso-groups-spyware/
# Reference: https://otx.alienvault.com/pulse/5d9f05596b5109e891f42a24

business-today.info
bun54l2b67.get1tn0w.free247downloads.com
hmizat.co
infospress.com
revolution-news.co
stopsms.biz
videosdownload.co

# Reference: https://citizenlab.ca/2020/08/nothing-sacred-nso-sypware-in-togo/

chretiendaujoudhui.com
viedechretien.org
vie-en-islam.com
leprotestant.com

# Reference: https://citizenlab.ca/2020/12/the-great-ipwn-journalists-hacked-with-suspected-nso-group-imessage-zero-click-exploit/

9jp1dx8odjw1kbkt.f15fwd322.regularhours.net
bananakick.net
crashparadox.net
f15fwd322.regularhours.net
flowersarrows.com
img565vv6.holdmydoor.com
stilloak.net
accountant-audio.com
audienceflake.com
secureyouradd.com
smallperfumerain.com
takemallelectric.com
weddingbandsoft.com

# Reference: https://twitter.com/AmnestyTech/status/1416810917216538629
# Reference: https://www.amnesty.org/en/latest/research/2021/07/forensic-methodology-report-how-to-catch-nso-groups-pegasus/
# Reference: https://github.com/AmnestyTech/investigations/blob/master/2021-07-18_nso/domains.txt

123tramites.com
14-tracking.com
1minto-start.com
24-7clinic.com
301-redirecting.com
365redirect.co
3driving.com
456h612i458g.com
7style.org
800health.net
911hig11carcay959454.com
aalaan.tv
accomodation-tastes.net
accountant-audio.com
accountcanceled.com
accountnotify.com
accountsections.com
accountsecurities.org
accounts.mx
activate-discount.com
active-folders.com
actorsshop.net
actu24.online
add-client.com
additional-costs.com
addmyid.net
addresstimeframe.com
adeal4u.co
ad-generator.net
adjust-local-settings.com
adjustlocalsettings.net
adscreator.net
adsload.co
adsmetrics.co
ad-switcher.com
advert-time.com
advert-track.com
afriquenouvelle.com
agilityprocessing.net
aircraftsxhibition.com
ajelnews.net
akhbara-aalawsat.com
akhbar-aliqtisad.com
akhbar-almasdar.com
akhbar-arabia.com
akhbar-islamyah.com
akhbarnew.com
al7erak247.com
al7eraknews.com
alawaeltech.com
albumphotopro.biz
alignmentdisabled.net
alive2plunge.com
allafricaninfo.com
allbeautifularts.com
alldaycooking.co
allergiesandcooking.com
allfadiha.co
alljazeera.co
allladiesloveme.com
all-sales.info
allthecolorsyoulike.com
allthegamesyouneed.com
allthemakeupyouneed.com
allthesongsyoulike.com
alluneed4home.net
al-nusr.net
alpharythme.com
alrainew.com
al-taleanewsonline.net
android-core.org
android-updates.net
apiapple.com
apigraphs.net
apiwacdn.com
appleleaveit.co
applicationcreation.net
appointments-online.com
appsgratis.com.mx
appsjuegos.com.mx
arabia-islamion.com
arabnews365.com
arab-share.com
arabworld.biz
arabworldnews.info
a-redirect.com
a-resolver.com
around-theglobe.co
arrowowner.com
ar-tweets.com
asrararabiya.co
asrararablya.com
asrarrarabiya.com
assembled-battery.com
atlaslions.info
audienceflake.com
auditorcast.com
authenticangry.com
authenticated-origin.com
authlovebirth.com
autodiscount.info
autoredirect.net
avocadofight.com
av-scanner.com
awardpractice.com
awizo.info
axis-indication.net
babies-bottles.com
bahrainsms.co
balancewreckpoint.com
banca-movil.com
bankportal.net
baramije.net
bargainservice.online
bbc-africa.com
bdaynotes.com
beanbounce.net
beautifulhousesaroundme.com
becomeiguana.com
beethoventopsymphonies.com
behindaquarium.com
benjamin-taganga.info
bestadventures4u.com
bestcandyever.com
bestday-sales.com
bestfoods.co
bestfriendneedshelp.com
bestheadphones4u.com
besthotelsaroundme.com
bestperfumesnow.com
bestpresents4all.net
bestsalesaroundme.com
beststores4u.com
bestsushiever.com
betterapplesearch.com
better-deal.info
betterhandsblack.com
bicyclerentalnow.com
biggunsarefun.com
bigseatsout.net
billednorth.com
birdbathmorning.com
biscuit-taste.net
bitanalysis.net
bitfadepens.com
bitforeat.net
bl33pon6373.com
blackberry.org.mx
black-bricks.net
blackwhitebags.com
blindlydivision.com
blockedsituation.net
blogreseller.net
boldconclusion.com
booking-tables.com
bottlehere.com
boxes-mix.net
boysrbabies.co
brand-tech.net
breakfastisgood.com
breaking-extranews.online
breakingnewsasia.com
breaking-news.co
breakthenews.net
br-hashtags.com
brighttooth.net
brownandblueeyes.com
browser-update.online
br-travels.com
bubblesmoke.net
bubblesweetcake.com
buildingcarpet.com
buildurlife.net
buildyourdata.com
bulbazaur.com
bulksender.info
bulktheft.com
bulk-theft.net
bullgame.net
bunchi.club
bundlestofear.com
businesssupportme.com
business-today.info
bussybeesallover.com
bustimer.net
butterdogchange.com
buymanuel.co
buypresent4me.net
bytlo.com
cablegirls.net
calculatesymbols.com
calendarsapp.com
candlealbum.com
carpetdignity.com
carrefour-des-affaires.com
cars-to-buy.com
cartsafer.com
cashandlife.com
cashtowebmail.com
casia-news.info
catbrushcable.com
catfoodstorage.net
catsndogsproducts.com
cdnupdateweb.com
cdnwa.com
celebrateyourdaynow.com
cell-abonnes.com
cell-mcel.info
cellphone-inside.org
cellphonesprices.com
cellular-updates.com
cellularupdates.info
cellular-updates.online
centersession.com
centrasia-news.com
changesstarted.net
chatresponses.com
cheapapartmentsaroundme.com
cheapcardonline.com
cheaphostingtoday.com
cheapmotelz.net
cheapsolutions4u.com
cheaptransporting.net
checkboxcart.com
checkboxfee.com
checkinonlinehere.com
check-my-internetspeed.com
chickenwaves.com
chistedeldia.mx
chocolateicecreamlovers.com
chocollife.me
chormnet3.com
chubaka.org
classic-furnitures.com
classstylemap.com
cleanmiddle.com
clickrighthere.online
clicktrack247.com
clients-access.com
clockmarkcoffee.com
closefly.com
cloudads.net
cloudbiggest.com
clubloading.net
clubmovistar.com
clubsforus.net
cnn-africa.co
coffecups.online
coffee2go.org
colorfulnotebooks.com
colorsoflife.online
columbus-parking.com
companybreakfast.net
computer-set.com
com-reports.net
conditionalcell.com
conference-ballroom.com
confusedmachine.com
connecting-to.com
contacting-customer.com
content-blocking.net
contentsbycase.com
convertedversion.com
cookiescom.com
cookiesoutthere.com
coolasiankitchen.com
coolbbqtools.net
coolmath4us.net
cool-smartphone-apps.com
cornclean.com
cottondecay.com
countrytrips.net
coupedumondepro.com
couponshops.info
cozmo-store.net
cpr-appointments.com
crimebackfire.com
crosslocated.net
crowndecoration.net
crownsafe.net
cryptocurrecny.com
cryptokoinz.com
cryptopcoinz.com
csomagodjott.com
cssgraphics.net
cupscars.net
curiousrabbitgame.com
currentscan.net
currentwestpeople.com
daily-sport.news
damanhealth.online
dancersing.net
dancinglife.co
dashboardprompt.com
databasemeans.net
data-formula.com
deadwordsstory.com
deal4unow.com
dearlegendseed.com
delivery-24-7.com
dental-care-spa.net
deportesinfo.com
designednetwork.com
destinytool.net
detailrush.net
deter-individuals.com
devicer.co
dhcpserver.net
diagram-shape.com
diaspora-news.com
diningip.com
dinneraroundyou.com
directbegins.com
directlyforuse.com
directurl-loading.com
discountads.net
discountmarkets.info
discountstores.info
discoveredworld-news.com
displaytag.net
dns-1.co
dns-analytics.com
dnsclocknow.com
dns-direct.net
dnslogs.net
dnsmachinefork.com
dnsprotector.net
dnsroof.com
dns-upload.com
documentpro.org
dogfoodstorage.net
dogopics.com
doitformom.com
doitforthefame-now.com
do-itonyour-own.com
domain-control.net
domainloading.net
domainport.net
domain-redirect.com
domain-resolver.net
domain-routing.com
domainsearching.net
domain-security.org
domains-resolver.net
domesticwindow.com
donateabox.co
donateaflower.com
donateyouroldclothes.net
done.events
donefordeal.com
doorcoffeebrown.com
dotroomeight.com
dowhatyouneed.com
downgradeproduct.com
dramatic-challenge.com
driventicket.com
eardooraround.com
earsstrawsfive.com
easybett.online
easy-pay.info
ecommerce-ads.org
economic-news.co
editorscolumn.net
effectivespeech.net
egov-online.com
egov-segek.info
egov-sergek.info
ehistorybooks.com
elementscart.com
eliminateadjust.com
elitecarz.net
e-loading.biz
eltiempo-news.com
email-plans.com
emiratesfoundation.net
emonitoring-paczki.pl
energy-dispatch.net
enoughtoday.org
entertainmentinat.com
entire-cases.com
e-prokuror.info
equal-gravity.com
erty.online
estatearea.net
e-sveiciens.com
eura-cell.com
eurasianupdate.com
eurosportnews.info
event-reg.info
everycolor-inside.com
everyuse.org
exchangenames.net
exchangenerate.com
ex-forexlive.com
existingpass.com
exoticsendurance.com
expired-getway.net
expiredsession.com
expiringdate.com
exploreemail.net
extend-list.net
externalprivacy.com
externaltransfers.com
extractsight.com
extrahoney.net
eyestoip.com
eyesunderspray.com
ezdropshipping.net
fabric-shops.com
facebook-accounts.com.mx
face-image.com
fadewallwine.com
fadi7apress.com
fallround.com
fallsjuice.com
familyabroad.net
fantastic-gardens.com
fashioncontainer.net
fashion-live.net
fashion-online.net
fashionpark.info
fastdirect.net
fastfixs.net
fatpop.net
fb-accounts.com
fbsecurity.co
feature-publish.net
feelbonesbag.com
feeltrail.com
femmedaffaire.com
fetchlink.net
fiestamaghreb.com
files-downloads.com
filingwarranty.com
financecomments.net
findavoucher.online
findgoodfood.co
findgroupon.com
finditout-now.com
findmyass.org
findmyfriendsnow.com
findmylunch.org
findmymind.co
findmyplants.com
findouthere.org
firebulletfan.com
fishingtrickz.com
fitness-for-ever.com
flashobligation.com
flashtraininggoal.com
flights-report.com
flights-todays.com
flying-free.online
flynewfries.com
fofopiko.org
foodeveryhour.com
foodforyou.info
foodiez.online
forgetjustit.com
formatpainter.net
formattingcells.com
forward5costume.com
forward-page.com
foto-top.info
foudefoot.live
free247downloads.com
freedominfo.net
freelancers-team.org
free-local-events.info
freeshoemoon.com
freshandsoftbread.com
freshsaladtoday.com
functionalcover.com
fundum8430.com
funinat.com
funinthesun4u.com
funintheuk.com
funnytvclips.com
fwupdating.com
gadgetproof.net
gadgetsshop.info
gate-sync.net
gdfr.online
gearstereotype.com
getagift.info
getoutofyourmind.com
getphotosinstant.net
getpoints.net
getspeednows.com
gettingchances.com
gettingurl.com
girlimstill.com
girlsyoulike.com
glassesofwine.com
glasstaken.com
glittercases.net
globalcoverage.co
globalnews247.net
global-redirect.net
globalsupporteam.com
golf-news.live
goodcookingonline.com
goodflowersinside.com
good-games.org
goodthoughts4u.com
googleplay-store.com
goroskop.co
gossipsbollywoods.com
gostatspro.com
go-trip.online
greatcitymore.com
greenbusnoise.com
greensmallcanvas.com
greenwatermovement.com
growstart.net
guardnotes.com
gulfca.net
gulf-financials.com
gulf-news.info
gumclockberry.com
hairdresseraroundme.com
halal-place.com
handcraftedformat.com
handcreamforyou.com
handymanwood.com
happiness4us.com
hardthinmetal.com
hatsampledc.com
hdsoccerstream.com
health-club.online
healthyguess.com
healthykids-food.com
hearsmugglergarden.com
heavy-flood.com
hellomydaddy.com
hellomymommy.com
highclassdining.net
hillsaround.com
hitrafficip.com
hmizat.co
holdingspider.com
holdmydoor.com
holdstory.com
holecatorange.com
holiday4u.work
holiday-sun.net
homeishere.co
homemadecandies.net
hona-alrabe3.com
horsefingercoffee.com
host-one-more.com
host-redirect.net
hotelsauto.co
hotels-review.org
hotelstax.co
hotelsurvey.info
hothdwallpaperz.com
hotinfosource.com
hot-motors.com
housesfurniture.com
housing-update.com
howisurday.com
howtoexplorebirds.com
howtomakeavocadotoastandegg.com
hracingtips.com
htmlmetrics.com
htmlstats.net
httpaccess.com
humandiven.com
humblebenefit.com
hundredsofdesigns.net
icecreamlovesme.com
icloudcacher.com
icrcworld.com
ideas-telcel.com.mx
igiheonline.com
ikomek.info
ilovemybeatifulnails.com
ilovemymilf.com
in2date.com
inbox-messages.net
income-tax.online
indrive.info
industry-specialist.com
ineediscounts.com
info24.live
infoquiz.net
infospotpro.com
infospress.com
insertfilters.net
insta-foto.net
instangram.com.mx
internetmobilespeed.com
intim-media.net
investigationews.com
investormanage.net
in-weather.com
ipjackets.com
ipurlredirect.com
islamic-news-today.com
islamiyaat.com
islam-today.info
islam-world.net
istgr-foto.com
itsthebrowser.com
iusacell-movil.com.mx
iwantitallnow.com
jaimelire.net
jeeyarworld.com
judgeauthority.com
just-one-left.com
kaidee.info
karbalaeyat.com
kaspi-payment.com
keepiptext.com
keepthiseasy.com
kenyasms.org
keyindoors.com
keynotepalm.com
khaleejtimes.online
khilafah-islamic.com
kingdom-deals.com
kingdom-news.com
klientuserviss.com
knowingfun.com
knowseminar.com
koramaghreb.com
kra.center
kurjerserviss.com
labonneforme.net
landflatheart.com
landstofree.com
laptop-parts.org
last-chainleash.net
latest-songs.com
lawlowvat.net
layerprotect.com
layoutfill.com
leadersnews.org
leavehomego.com
leggingsjustforyou.com
legsfriesears.com
legyelvodas.com
legyelvodas.net
leleader.org
leprotestant.com
lesbonnesaffaires.online
lesportail.biz
letyoufall.com
levelsteelwhite.com
liam-ryan.co
license-updater.com
lifedonor.net
lifenoonkid.com
like-the-rest.com
limitedfeature.com
link-crawler.com
linking-page.com
link-scan.net
linksnew.info
littlefrogalarm.com
live-once.net
lizzardsnail.com
loading-ads.net
loading-domain.com
loading-images.com
loadingpage1.net
loadingpage4.net
loading-page.net
loading-pag.net
loading-url.net
loadingurl.net
loadthatpage.com
localgreenflowers.com
login-service.net
loginverify.net
loisiragogo.com
lonely-place.com
looking-for-two.com
lookitupnow.website
looklifewhite.com
look-outsidenow.com
loschismescalientes.com
losnegocios.biz
lost-n-found.net
loveandhatenow.com
lowervalues.com
maghrebfoot.com
maghrebfunny.biz
magicalipone.com
mailappzone.com
maingreatessay.com
mainredirecter.com
mamba-live.com
managedsnap.com
management-help.com
managingincluded.com
mangoutlet.net
manoraonline.net
manydnsnow.com
maphonortea.com
mapupdatezone.com
martinipicnic.com
massagetax.co
maymknch2026.co
mcel.info
mcel-update.com
mealrentyard.com
meanspursuit.com
medicalcircle.net
medical-updates.com
megacenter.info
megaticket.info
mercedesbenz-vip.com
merchant-businesses.com
mergeandcenter.com
methodslocal.com
mgifweb.com
mideast-today.com
miles-club.com
miralo-rapidamente.com
mirrorgossip.com
mixershake.net
mixsinger.com
mobilebrowsing.net
mobilephonesme.com
mobile-softs.com
mobiles-security.net
mobile-update.online
mobile-updates.info
mobileweatherweb.com
mobi-up.net
modifytimezone.net
moh-followup.com
moh-online.com
monawa3ate.org
mondaymornings.co
moneycheesecolor.com
moneycoincurrency.com
moneydigitalcurrency.com
moneyxchanges.com
moregatesthere.com
morning-maps.com
mosque-salah.com
mosque-salah.net
mosquesfinder.com
motiontastebad.com
motivation-go.com
motordeal.info
movie-tickets.online
moyfoto.net
mozillaname.com
moz-noticias.com
mozsafety.com
m-resume.com
muftyat.com
multiplecurrencies.com
music-electric.org
music-headphones.org
muslim-world.info
muzicclips.com
muziclovers.org
mybrightidea.co
mydailycooking.net
mydarkarms.com
myfiles.photos
myfreecharge.online
myfundsdns.com
mygreathat.com
mygummyjelly.com
myheartbuild.com
mykaspi.com
mylogfrog.com
mylovelypet.net
mymanagement-service.com
mymensaje-sms.com
mymobile-cell.com
mynewbesttime.com
mypostservice.online
my-privacy.co
mysadaga.com
myseesea.com
myself-dns.com
myshoesforever.com
myshop4u.net
mystulchik.com
mysuperheadphones.co
myukadventures.com
mz-vodacom.info
nation24.info
nationalleagues.net
nation-news.com
natural-ice.com
navywalls.com
nbrowser.org
nerdtvfan.com
net-protector.com
netstatistics.net
netvisualizer.com
network190.com
network-bots.com
networkinfo.org
networkingloading.com
networkingproperty.com
neutralpages.com
neverwayneck.com
newandfresh.com
newandroidapps.net
newarrivals.club
newcooking.org
newdailycoupons.com
newenvelope.net
newipconfig.com
newip-info.com
newmodel.online
newnhotapps.com
newredirect.net
news-alert.org
newscurrent.info
newsdirect.online
news-flash.net
news-gazette.info
news-news.co
newsofficial.info
newsofgames.com
newsofthemoment.net
newsportal24.online
newtarrifs.net
newworld-news.com
nicevibezaction.net
nightevents.info
nightscloudwant.com
nnews.co
noextramoney.com
noloveforyou.com
nomorewarnow.com
noodlegray.com
noonstore.sale
noor-alhedaya.com
normal-brain.com
normalseason.com
normal-strength.com
nosalternatives.com
nosemorningnine.com
nothernkivu.com
notificationsneeded.com
noti-global.com
noti-hot.com
noti-hoy.co
notisms.net
notresante-infos.com
nouveau-president.com
nouvelles247.com
noveletters.com
novoicenoprob.net
novosti247.com
now-online.net
nsoqa.com
nuevaidea.co
objectreduction.com
odnoklass-profile.com
offresimmobilier.com
offspringperform.net
ok-group.org
old-glasses.net
oldmywater.com
oneadjump.com
one-isnot-enough.com
oneleadingchat.com
onetreeinheaven.com
online-dailynews.com
onlinefreework.com
online-loading.com
onlineshopzm.com
onlycart.net
onlygossip.info
only-news.net
onlytoday.biz
onlywebsite.org
onthegoodtime.com
ooredoodeals.com
openingquestion.org
operatingnews.com
operations-delivery.com
operations-shifts.com
opera-van.com
oplata-shtraf.info
opposedarrangement.net
optionalshift.online
optionstoreplace.com
orange-updates.com
organicdiamonds.net
ourorder.info
ourperfume.net
outgoingurl.com
outletsaroundme.com
outletstore.tech
page-host.net
page-info.com
pageisloading.net
pageredirect.co
pageupdate.co
painruncart.com
painting-walls.com
panelbreed.com
papers2go.co
papervoice.net
park4free.info
particularmechanic.net
parties-fun.com
pastesbin.com
pathtogo.net
pay-city.com
paynfly.info
pay-penalty.info
paywithcrytpo.com
pc-views.net
performinghost.com
permalinking.com
phonemetrics.co
phonering4you.com
phonestats.net
photo-afisha.net
photo-my.net
physicalcheetah.com
pickcard.info
pickuchu.com
picture4us.com
pincattape.com
pine-sales.com
pizzatoyourplace.com
planeocean.com
playfantasticsplastic.com
playwithusonline.com
pleaseusenew.com
pleaseusenew.net
pochta-info.com
politica504.com
politicalpress.org
politiques-infos.info
popagency.net
popularmessages.net
port-connection.com
portredirect.net
possibilitytotransfer.com
postainf.net
posta.news
pourcentfilers.com
poweredbycpanel.com
poweredlock.com
ppcisdead.com
pprocessor.net
practical-basis.net
practicehazard.com
preferenceviews.com
preferring.org
presidentialagent.com
preventadmission.com
preventsusing.com
pride-industry.com
pride-industry.net
pridetomyself.net
prikol-girls.com
primarystrike.net
prioritytrail.net
privo7799add.net
productsall.net
productsview.co
projectgoals.net
promosdereve.com
promotionlove.co
proudmorale.com
pub-dns.com
publishbig.net
puffyteddybear.com
purchaseusingcoins.com
purple-enveloppe.com
puttylearning.com
qaintqa.com
qaoffers.net
qualityfeeling.net
quitmyjob.xyz
quota-reader.net
quran-quote.com
rainingcats.net
raininscreen.com
randomlane.net
rapidredirecting.com
raresound.org
raw-console.com
reachcomputer.com
readingbooksnow.com
readirectly.com
realmythtrend.com
receiptpending.net
reception-desk.net
recordinglamping.com
redcrossworld.com
redemptionphrase.com
redirect2url.net
redirectchannel.net
redirectcheck.net
redirect-connection.com
redirectconnection.net
redirectdoor.com
redirecteur.net
redirectgate.com
redirectingpage.net
redirecting-url.com
redirectingurl.net
redirectingurl.org
redirection-url.net
redirectit.net
redirectking.net
redirect-link.com
redirectload.com
redirectmotion.org
redirect-net.com
redirectnet.net
redirectool.com
redirect-protocol.com
redirectprotocol.net
redirect-service.net
redirectshare.com
redirect-systems.com
redirect-traffic.net
redirect-tunnel.net
redirect-webpage.net
redirectweburl.com
redirigir.net
redirstats.com
redstarnews.net
reflectextension.net
regionews.net
regularhours.net
reklamas.info
related-ads.com
relatedspams.net
reloading-page1.com
reloadinput.com
reloadpage.net
reload-url.com
reload-url.net
remove-client.com
remove-from-mailing-list.com
remove-from-mailinglist.com
remove-subscription.com
renewal-control.net
rentalindustries.com
rentmotors.net
research-archive.com
reseausocialsolutions.co
reservationszone.com
reseufun.com
resolutionsbox.com
restaurantsstar.com
results-house.net
revoke-dashboard.com
revolution-news.co
rewards-club.info
rhymeshey.com
righttriangle.net
roadwide.net
robotscan.net
rockbreakdown.com
rockmusic4u.com
rockstarpony.com
rosegoldjewerly.com
rosesforus.com
rss-me.com
russian4u.net
sabafon.info
safecrusade.com
safe-mondays.net
saladsaroundme.com
sale-2019.com
saltyapplepie.com
same-old.net
savemoretime.co
saveurday.net
scannerservices.net
scaryaudience.com
scriptincluded.com
scriptsinstallers.com
searchjustdont.net
searchunit.net
sec-checker.com
secretgirlfriend.net
secure-access10.mx
securedloading.com
securedlogin.org
secured-url.net
securesmsing.com
secureyouradd.com
securisurf.com
securlaw.com
select-edition.net
send2url.com
sendhtml.net
sendingurl.com
sendingurl.net
sergek.info
seriousprotection.net
services-sync.com
service-update.online
servingshade.com
severalheroes.com
sharepassageset.com
shia-voice.com
shipment-status.org
shoppingdailydeals.net
short-address.com
shortfb.com
shortredirect.com
shtraf.info
shuturl.com
signpetition.co
silverodgone.com
simplycode.co
site-lock.net
site-redirecting.com
skillsforest.net
smallperfumerain.com
smallridebar.com
smarttarfi.com
smokeshowshoe.com
smoothurl.com
sms-center.info
smscentro.com
smser.net
smsmensaje.mx
sms-sending.net
sms-zone.org
snoweverywhere.com
soccerstreamingstars.com
social-artist.net
social-exercise.com
social-life.info
social-rights.com
sockstubename.com
somewarmremember.com
somuchrain.com
so-this-is.com
sparepresence.com
specialgifts4all.com
speechenforce.com
speedservicenow.com
spiritualbrakes.com
sportssaint.net
sportupdates.info
sportupdates.online
sputnik-news.info
squaretables.net
sslbind.com
standartsheet.com
standstock.net
starbuckscoffeeweb.com
starreturned.com
stars4sale.co
start2playnow.com
starting-from0.com
startupsservices.net
stationfunds.net
statisticsdb.net
statsads.co
statsupplier.com
staysystem.net
stopmysms.com
stopsms.biz
storageseminar.net
storelive.co
strangegloom.net
strategyroles.com
suitcasesmellnice.com
summermover.com
sunday-deals.com
sunnydaylight.com
sunrise-brink.net
sunsetdnsnow.com
superlinks4u.com
supportonline4me.com
surprising-sites.com
sweetcup.co
sweet-water.org
sync-cdn.com
syncingprocess.com
syncmap.org
systemtrees.com
tablereservation.info
tahmilmilafate.com
tahmilmilafate.info
takecarhomes.com
takemallelectric.com
takethat.co
talabatt.net
tastyteaflavors.com
teachskate.com
techhelping.net
telangana-news24.com
telecom-info.com
telephonequality.com
template-iso.net
tengrinews.co
tentrosegain.com
thainews.asia
thankstossl.com
theappanalytics.com
theastafrican.com
thebestclassicalmusic.net
thecoffeeilove.com
thefuturearticle.net
thehighesttemple.com
thehoteloffers.com
the-only-way-out.com
theredirect.net
theshopclub.org
thesimplestairs.com
thespaclub.net
theway2get.com
thoughtfulbundle.com
tibetnews365.net
ticket-aviata.info
ticket-selections.com
tiketon.info
timelesscelebrity.com
timeofflife.com
tinyurler.com
tlgr-me.org
tobepure.com
todaysdeals4u.com
todoinfonet.com
toggletools.com
tommyfame.com
tomorrowpastno.com
tookcheckout.com
top100vidz.com
top10gifts4men.com
top10leadsgen.com
topadblocker.net
topbraingames4u.com
topcontactco.com
topoems.com
topten-news.info
touristvaca.com
towebsite.net
track-your-fedex-package.com
trackyourfedexpackage.net
track-your-fedex-package.org
trade-agreement.com
tradeexchanging.com
traffic-pay.com
traffic-updates.info
transferbase.co
transferkeep.com
transferlights.com
transfer-rate.com
travel-foryou.online
travelight.online
traveltogether.link
trendsymbol.net
trialvariable.net
trianglerank.net
tricksinswiss.com
trililihihi.com
tripleclickpays.com
t-support.net
tunnelprotocol.net
turismo-aqui.com
turkeynewsupdates.com
turkishairines.info
tvshowcusting.com
twiitter.com.mx
uaenews.online
uidebol.info
umbrellacover.net
unavailableentry.com
unionofteenagers.com
uniquesite.co
univision.click
un-limitededitions.com
unlockaccount.net
unonoticias.net
unsubscribed.co
unsubscribeinhere.com
unsubscribe-now.net
untoldinfo.net
unusualneighbor.com
updateapps.net
updatedchargers.com
updatedcharges.net
updating-link.com
updatingpage.com
updating-url.com
updating-url.net
updatingwebpage.com
upgrade-sim-card.com
upkeepno.com
upload-now.net
uptownfun.co
urbestfriends.com
url2all.net
urlconfig.net
url-configure.com
urlconnection.net
urldefender.net
url-direct.com
url-hoster.com
url-loading.com
urlpage-redirect.com
urlpush.net
url-redirect.com
url-redirect.net
urlredirect.net
urlregistrar.net
urlreload.net
urlscanner.net
urlsync.com
urlupdates.com
urlviaweb.com
urspanishteacher.net
user-registration.com
utensils.pro
vamizi.info
vanillaandcream.com
varietyjobspaid.org
varietyregistrar.com
vastdealsnow.com
vault-encryption.com
verify-app.online
videosdownload.co
videotubbe.net
vider-image.com
viedechretien.org
vie-en-islam.com
viewhdvideos.com
viewstracker.com
vipmasajes.com
viva-droid.com
vivrechezsoi.info
vkan-profile.com
volcanodistance.com
volcanosregion.com
waffleswithnutella.com
waitingtoload.com
walkerpost.net
walkhatclock.com
wallagainsthall.com
walltome.com
wasted-nights.com
waterforplants.net
watersport4u.net
weakdistance.com
weather4free.com
weatherapi.co
webadv.co
web-check.co
web-config.org
web-developper.net
web-domain.net
webexaminer.net
web-hoster.co
web-loading.com
web-loading.net
web-only.net
web-page.co
webpageupdate.co
webprotector.co
webprotocol.net
webresourcer.com
web-scanner.co
websconnector.co
websiteconnecting.com
websiteeco.com
websitereconnecting.com
websites4yourhost.com
websitetosubmit.com
web-spider.net
webstrings.net
websupporter.co
webtunnels.net
webupdater.net
web-url.net
web-viewer.online
webview-redirect.com
weddingbandsoft.com
wedding-strategy.com
welcomehosting.net
welovebigcakes.com
welovelollipops.com
welovemorningcoffees.com
wewantflowersnow.com
whatcanidowithbirds.com
whatsapp-app.com
whatsappsupport.net
whats-new.org
whereismybonus.com
whereismyhand.com
whereismytree.net
whereisthehat.com
whynotyesterday.com
whypillyellow.com
willpurpleshe.com
windyone.net
winfoxflip.com
winter-balance.com
wintertimes.co
wishdownget.com
without-additional.com
witness-delay.com
wonderfulinsights.com
woodhome4u.com
wordstore.net
working-online.net
workshopmanager.net
wraptext.net
xchange4u.net
xchangerates247.net
xn--nissn-3jc.com
xn--noki-t5b.com
xn--telegrm-qbd.com
xtremelivesupport.com
y0utube.com.mx
youaresostupid.net
youcantpass.com
youintelligence.com
youliehow.com
yourbestclothes.com
yourbestefforts.com
yourbestvaca.com
yourgreatestsmartphone.com
yourhotelreservation.info
yourlastchance.net
yousunhard.com
yummyfoodallover.com
zednewszm.com
zm-banks.com
zm-weather.com
zsports-info.com

# Reference: https://twitter.com/blackorbird/status/1481548876918439936
# Reference: https://citizenlab.ca/2022/01/project-torogoz-extensive-hacking-media-civil-society-el-salvador-pegasus-spyware/

cominfo-urbano.com
deportes24-7.com
netweb-cloud-services.com
solo-hoy.com
informados24h.cominfo-urbano.com
mobile-analytics.netweb-cloud-services.com

# Reference: https://twitter.com/h2jazi/status/1490829405106569217
# Reference: https://www.virustotal.com/gui/ip-address/185.244.151.172/relations
# Reference: https://www.virustotal.com/gui/ip-address/185.198.58.178/relations
# Reference: https://www.virustotal.com/gui/file/8b5279e449004c98c8693363cf9a1d143eb3ef3537bd81cc6f03f41305f6316d/detection

mijn-vgz-overzicht-nl.info
travelcrimea.info

# Reference: https://citizenlab.ca/2022/04/peace-through-pegasus-jordanian-human-rights-defenders-and-journalists-hacked-with-pegasus-spyware/
# Reference: https://otx.alienvault.com/pulse/624c56d3b71d3fc25f820e87

akhbar-almasdar.com
akhbar-islamyah.com
akhbarnew.com
al-nusr.net
al-taleanews.net
al-taleanewsonline.net
al7erak247.com
al7eraknews.com
alrainew.com
arabia-islamion.com
cozmo-store.net
hona-alrabe3.com
khilafah-islamic.com
login-service.net
mangoutlet.net
mobiles-security.net
rss-me.com
talabatt.net
unsubscribe-now.net

# Reference: https://www.trendmicro.com/en_us/research/21/h/confucius-uses-pegasus-spyware-related-lures-to-target-pakistani.html
# Reference: https://otx.alienvault.com/pulse/611e21b71a08edbfb6061a06

cnic-ferify.live
cnic-update.com
defencepk.email
fbr-update.com
fbr.news
fbr.tax
file-dnld.com
funtifu.live
ispr.email
mailerservice.directory
pakistanarmy.email
parinari.xyz
pemra.email
pirnaram.xyz
pmogovpk.email
priveetalk.com
support-team.tech
api.priveetalk.com
download.fbr.tax

# Reference: https://citizenlab.ca/2022/04/catalangate-extensive-mercenary-spyware-operation-against-catalans-using-pegasus-candiru/

123tramites.com
adsmetrics.co
infoquiz.net
nnews.co
redirstats.com
statsads.co
statsupplier.com

# Reference: https://www.virustotal.com/gui/ip-address/161.8.149.21/relations

allaboutwrightwood.com
bingoblitzvippro.com
brandttoyota.com
brookviewpetgrooming.com
casusbocekler.com
cerfcube.com
derinaydogan.com
eliteautosaloninc.com
garrigareptiles.com
gherboshop.com
grevejeunesmedecins.com
henrietta-commerce.com
judo-genlis.com
kruseswiss.com
lamyterie.com
leshutchins.com
loschanquetes.com
macmaclaren.com
masternicherights.com
masterpolishformula.com
matlauinlondon.com
mywebbargains.com
nettprofile.com
northridgebest.com
produitsjpcote.com
recepzihni.com
rotaryimports.com
seacoastkaraoke.com
sterlingpetcare.com

# Reference: https://citizenlab.ca/2022/07/geckospy-pegasus-spyware-used-against-thailands-pro-democracy-movement/
# Reference: https://otx.alienvault.com/pulse/62d56bfbcb851c6bfcfdaf4d

1place-togo.com
accounts-unread.com
sexxclip.com
siamha.info
stayallalone.com
thtube.video
