# Copyright (c) 2014-2026 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://x.com/moonlock_lab/status/1963616720846807052
# Reference: https://9to5mac.com/2025/08/27/mosyle-identifies-new-mac-malware-that-evades-detection-through-fake-pdf-conversion-tool/
# Reference: https://app.validin.com/detail?find=ae2d6265e194028f2d2e97cb0c39187b&type=hash&ref_id=4cd5256c385#tab=host_pairs (# 2025-09-04)
# Reference: https://app.validin.com/detail?find=e5c07c5914b6ae6bdfc0&type=hash&ref_id=803b657f07b#tab=host_pairs (# 2025-09-04)
# Reference: https://www.virustotal.com/gui/file/63098c56b112c40522d224caae42b2aa44e5d62205457c1955782776d1915d6c/detection

52.5.89.167.nip.io
adblock-me.com
ai-voice-change.com
blazeconvert.com
bluethooth-mic.com
browse-chrome.com
clean-up-app.com
cleanup-device.com
climate-meter.com
cookerbook.com
file-morph.com
fileripple.com
find-my-devices.com
flex-vid.com
imaginify-ai.com
manual-expert.com
manuals-access.com
measuretape-app.com
my-plant.app
mydata-app.com
mypdfviewer.com
myphoto-ai.com
onetapremote.com
optimizespaceapp.com
pdfviewz.com
proconv.com
productive-doc.com
qr-code-master.com
qr-fun.com
qrcodescannerpro.com
scanmy-pdf.com
shiftfolder.com
solidpdfpro.com
spark-ware.com
sparkonsoft.com
sparksoftinc.com
sparkware-inc.com
themanualfinder.com
translate-now.com
unlockr.app
viewerdoc.com
app.adblock-me.com
app.ai-voice-change.com
app.bluethooth-mic.com
app.clean-up-app.com
app.cleanup-device.com
app.climate-meter.com
app.find-my-devices.com
app.flex-vid.com
app.imaginify-ai.com
app.measuretape-app.com
app.my-plant.app
app.mydata-app.com
app.myphoto-ai.com
app.onetapremote.com
app.optimizespaceapp.com
app.pdfviewz.com
app.qr-code-master.com
app.qr-fun.com
app.qrcodescannerpro.com
app.scanmy-pdf.com
app.translate-now.com
app.unlockr.app
dev.ai-voice-change.com
dev.bluethooth-mic.com
dev.find-my-devices.com
dev.flex-vid.com
dev.imaginify-ai.com
dev.measuretape-app.com
dev.mydata-app.com
dev.pdfviewz.com
dev.qr-code-master.com
dev.qr-fun.com
dev.qrcodescannerpro.com
dev.translate-now.com
test.browse-chrome.com
